Merge "Decrypt secrets and plumb to Ansible" into feature/zuulv3