---
- name: Deploys root password hash
  replace:
    path: /etc/shadow
    regexp: "^root:[^:]*:"
    replace: "root:{{ root.passwd_hash }}:"