ansible: set trust-model to always for vault handling scripts