---

 - name: Ensure service account is set up.
   become: true
   user:
     name: "{{ service_account }}"
     shell: /sbin/nologin