---

- name: Update PAM configuration
  command: /usr/sbin/pam-auth-update --package

- name: Restart SSH
  service: name=ssh state=restarted

- name: Update CA certificate cache
  command: /usr/sbin/update-ca-certificates --fresh

- name: Restart ferm
  service: name=ferm state=restarted

- name: Reload systemd
  command: systemctl daemon-reload