As of 1.9 at least, you may specify a password file in your ansible.cfg and not have to extend your playbook calls with vault flags.
