ansible: Only allow SSH from group SSH on wuerfel