feat: set random password only on creation

tasks/create_users_groups.yml

@@ -40,5 +40,5 @@
     shell: "{{ item.value.shell | default('/bin/bash') }}"
     state: "{{ item.value.state | default('present') }}"
     uid: "{{ item.value.uid | default(omit) }}"
-    update_password: always
+    update_password: on_create
   with_dict: "{{ vault_users }}"