make the root auth_keys setup part of the cloud_setup_basic tasks

playbooks/hosts/jenkins.cloud.fedoraproject.org.yml

@@ -22,8 +22,7 @@
 
   tasks:
   - include: $tasks/cloud_setup_basic.yml
-  - name: add root keys for other allowed users
-    action: authorized_key user=root key='$PIPE(${auth_keys_from_fas} ${root_auth_users})'
-  
+
+
   handlers:
   - include: $handlers/restart_services.yml

tasks/cloud_setup_basic.yml

@@ -31,6 +31,12 @@
   tags:
   - config
 
+- name: add root keys for other allowed users
+  action: authorized_key user=root key='$PIPE(${auth_keys_from_fas} ${root_auth_users})'
+  only_if: is_set('${root_auth_users}'}
+  tags:
+  - config
+
 # note - kinda should be a handler - but handlers need args
 - name: restorecon
   action: command restorecon -R /root/.ssh