ipa/client: hbac check Set this to not be changed since it's a check

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/ipa/client/tasks/hbac.yml

@@ -90,6 +90,7 @@
   fail:
     msg: "`{{ item }}` is not defined"
   ignore_errors: true
+  changed_when: false
   when: lookup('vars', item, default="<undefined-sentinel>") == "<undefined-sentinel>"
   loop:
     - ipa_host_group