vault: "{{ lookup('pipe', 'pass show crans/ansible_vault') | from_yaml }}"