fix kadmin mask on ipa machines

roles/ipa/tasks/main.yml

@@ -37,11 +37,14 @@
   - ipa
   - config
 
+#
+# switch this to use the systemd module as soon as ansible 2.2 is out.
+#
+
 - name: mask kadmin
-  service: name=kadmin.service
-           state=stopped
-           enabled=no
-           masked=yes
+  file: src=/dev/null
+        dest=/etc/systemd/system/kadmin.service
+        owner=root group=root state=link
   tags:
   - ipa
   - config