[defaults] roles_path = ./roles ask_vault_pass = True