--- - include_tasks: hardening.yml when: ssh_hardening_enabled | bool