Separate exam-mode stuff in own role

lmn-client.yml

@@ -65,7 +65,6 @@
     mirror_dvdcss: "{{ vault_mirror_dvdcss }}"   ## http://livebox.example.org/libdvdcss/
 
     uploadseed_pwd: "{{ vault_uploadseed_pwd }}"
-    rsyncsecret: "{{ vault_rsyncsecret }}"
     keys2deploy: "{{ vault_keys2deploy }}" ## ['ssh-ed25519 AAAAC…uYlnS0', 'ssh-ed25519 AAAA…KTM']
     localuser: "{{ vault_localuser }}"  ##  needed here for the (universal) pam-mount configuration
 
@@ -96,7 +95,8 @@
     - lmn_mount
     - lmn_kde
     - lmn_fvs ## school specific customization
-    - lmn_vm
+    - role: lmn_vm
+      when: vm_support
     - lmn_printer
     - kerberize
     - lmn_security
@@ -104,6 +104,8 @@
       when: "'localhome' in group_names"
     - role: lmn_teacherlaptop
       when: "'teacherlaptop' in group_names"
+    - role: lmn_exam
+      when: exam_mode
 
   tasks:
     ## Temporary fixes and quirks: