security mitigations ansible role