only_if needs to be block of itself.
Fix keys directory.
Use back shell for the taskd user.
The certificates will be generated by it.
Initializer de database as the taskd user.
Generate all the certificates as the taskd user.