- assert:
    that:
      - 'secret_var == "secret"'


- copy: src=vault-secret.txt dest={{output_dir}}/secret.txt

- name: cleanup decrypted file
  file: path={{ output_dir }}/secret.txt state=absent