If ansible_ssh_user is set through extra_vars, ansible will
create a .ansible directory in the home dir of that user.
However, it will be owned by root, which is not what ansible
will be expecting when it is provision through SSH at a later date.
NOTE: I'm not doing any validation on the opt_flags param and I don't recommend using for more then adding a -vvvv.
Also, I'm purposely excluding the vault flags (which also pretty commonly used) because you shouldn't be baking
private keys and certs into your images. Instead, just avoid running the vault specific code or use the
opt_flags if absolutely necessary.