update..

common.yml

@@ -16,5 +16,20 @@
 # ansible-playbook first_run.yml -i hosts -u root --ask-pass
 
 - hosts: all
+
+  vars:
+
+    # created with:
+    #
+    #    echo -n 'E*********%' | ansible-vault encrypt_string --stdin-name 'ansible_become_password'
+    #
+    ansible_become_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          34396433383837666135346136643137633333316131633235353039613361626631346434653636
+          6431366536663636323537633965306135343239626434660a386663353837396263333035356365
+          32636236383566316565383137613232353066313032373430643631303433616265323566663165
+          3539316363386538370a353937613535313538366562616334313566366332393532616630636133
+          6562
+
   roles:
     - common