/blog/ansible-vault/
https://www.cloudbees.com/blog/how-to-keep-your-playbooks-secure-with-ansible-vault