Use /ansible as the home directory for the ansible user
Make /etc/sudoers.d/ansible mode 0440