- hosts: testhost vars_files: - vars/test_var_encrypted.yml gather_facts: False tasks: - assert: that: - 'secret_var == "secret"'