Using the official pw-token-gen rather than my own pwgen & sed solution. This is because my solution was regenerating passwords on each run, which our playbooks do not support.