Generate a self-signed cert when none is provided

The documentation suggested doing this manually, but this is better because it does it for you!
Nope! http://docs.ansible.com/shell_module.html

You can provide `key=value` pairs at the end of a shell command.