ansible vault decrypt variable in file