This one is also disabled since it's not super useful to run more than once. This role however doesn't report changes on reruns (as we've seen for the os_hardening role).
This role was run but is commented out as rerunning it shouldn't add much whilst also being a time hog.
