Use tmpfiles for the ask-password ACL

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>

roles/robosignatory/files/ask-password-robosignatory.conf

@@ -0,0 +1 @@
+a       /run/systemd/ask-password       -       -       -       -       u:robosignatory:rwx

roles/robosignatory/tasks/main.yml

@@ -192,12 +192,12 @@
   - robosignatory
 
 - name: Allow robosignatory to use systemd-ask-password
-  acl:
-    path: /run/systemd/ask-password
-    entity: robosignatory
-    etype: user
-    permissions: rwx
-    state: present
+  copy:
+    src: ask-password-robosignatory.conf
+    dest: /etc/tmpfiles.d/ask-password-robosignatory.conf
+    owner: root
+    group: root
+    mode: 0644
   tags:
   - config
   - robosignatory