infra/ansible/playbooks/tasks
..
include
reencrypt-vault-default-key.yml
reencrypt-vault-super-key.yml