---
- name: Deploys root password hash
  replace:
    path: /etc/shadow
    regexp: '^root:[^:]*:'
    replace: 'root:{{ root.passwd_hash }}:'