Avoid exposing passwords in the process list, use a password file.

lmn-client.yml

@@ -57,6 +57,7 @@
     ## Local mirror for libdvdcss. Remove or leave empty to use no mirror:
     mirror_dvdcss: "{{ vault_mirror_dvdcss }}"   ## http://livebox.example.org/libdvdcss/
 
+    uploadseed_pwd: "{{ vault_uploadseed_pwd }}"
     rsyncsecret: "{{ vault_rsyncsecret }}"
     keys2deploy: "{{ vault_keys2deploy }}" ## ['ssh-ed25519 AAAAC…uYlnS0', 'ssh-ed25519 AAAA…KTM']
     localuser: "{{ vault_localuser }}"  ##  needed here for the (universal) pam-mount configuration