---
- name: add workstation users
  loop: "{{ ws_users }}"
  user:
    name: "{{ item }}"
    state: present
    password: "{{ hostvars[inventory_hostname]['vault_user_password_'+item] }}" ## TODO: find nicer way to do this
    shell: "{{ users[item].shell | default(ws_users_default_shell) }}"

- name: install ssh keys for workstation users
  loop: "{{ ws_users }}"
  authorized_key:
    user: "{{ item }}"
    key: "{{ users[item].ssh | join('\n') }}"
    exclusive: yes