Set the root password

Very few people (OK, just me at the moment) have this password, as most
will access systems via sudo.  This will only be used for console access
when performing repairs.  The crypted password is stored in the secrets
file -- no need to rely just on crypt(3) for that.

Fixes #3004.

roles/base/tasks/main.yml

@@ -2,3 +2,4 @@
 - include: packages.yml
 - include: sudo.yml
 - include: users.yml
+- include: rootpw.yml

roles/base/tasks/rootpw.yml

@@ -0,0 +1,5 @@
+---
+- name: set root password
+  user:
+    name: root
+    password: "{{crypted_root_pw}}"

secrets.yml

@@ -1,16 +1,14 @@
 $ANSIBLE_VAULT;1.1;AES256
-33396637653566653065666532646135356364636632366333613439623565626635303838643261
-6265313261666339636165323864653736363233326632390a333361303330316464663238386439
-65333139396665623830333763346632393135306362393337633531313434333135613235646130
-6562326461373836350a613933613235376431643562373064633531383631666138303736656337
-31623264653133303931636635643636383162323631383431623138386336393965633363323336
-61643035636336376366363237323632326239386334373135393433663034393534313331643338
-31373331343063633439373138633039303863353638363763323239643431376138306464316335
-35383734386561343064303431643465663930626537666331366663643938303061353039333434
-64373938323961616265306136653937616361356536393432656636626161643464316363633431
-36636331326334613761323564386534313030346337306433616333343264383265336638346238
-36613234633339666135643961336533663962643431653832633364316433623039396538653339
-35303633373361323061343162393265653739313137613663363938393863313337633662333238
-66643966363638323961333062313230323930646538396637303938633434336462623164643365
-62633363633930356564336362396663323637366537616461396666663534303838393763653339
-393464303832373564326232393838373539
+31363130353963323061373139663235653133363061633532376538636139313535636532636462
+3832643733636530623231633063636163626237306435350a353338663633336338366539336438
+32383365316664643633376231363262383338306535383437333833613363626161626631663335
+3733323331373537370a336630393531346630616166633461326233376261353666633234363738
+64623338313832643638383366336237383237626339303162333961323865363863646635363535
+31653964643361343734336631363831633261343061396265333937323131616631373432653563
+66396636396536316230613838656564666462356233373932353434346166323666313830383235
+62386138353033393765313034303336343433373532353437373233333732313433326135663637
+61376230363835363466323461633537303037333532656637653635343237636438623463643333
+37346437303236663364353435656437363663303434393236306639373137623366646132346532
+30353333626431306133653833366234636161616261336432616439353639356331343765343237
+30306233323631326664623733316362306634353730613033616432666432316136363965303336
+30373561336537623366646230303665623330353665616538613331313932613334