# in z.B. roles/bastionhost/tasks/system_setup/user_hardening.yml
- name: Bastionhost | User Hardening | Set a strong root password from vault
  ansible.builtin.user:
    name: root
    password: "{{ root_password_hash }}"
  when: root_password_hash is defined