Update to 2021-12-13 19:00

roles/ssh/tasks/cleanup.yml

@@ -0,0 +1,13 @@
+---
+
+- name: List all authorized keys directories
+  shell: ls -1 /etc/ssh/authorized_keys | xargs -n1 basename
+  register: existing_ssh_keys
+  changed_when: False
+  tags: ssh
+
+- name: Remove unmanaged ssh keys
+  file: path=/etc/ssh/authorized_keys/{{ item }} state=absent
+  loop: "{{ existing_ssh_keys.stdout_lines | default([]) }}"
+  when: item not in ssh_users | rejectattr('keys_file', 'defined') | map(attribute='name')
+  tags: ssh