---
- name: check ls
  hosts: all
  become: true
  roles:
    - security-settings
  vars:
    sshrootlogin: 'forced-commands-only'