--- - hosts: all roles: - role: securityupdates when: securityupdates|default(true) != false