> It also means if any of your servers is compromised, the attacker will be in possession of your whole playbook. Which should, if you are designing your syste

> It also means if any of your servers is compromised, the attacker will be in possession of your whole playbook. Which should, if you are designing your systems wisely, not matter at all, in any way, because configuration management systems should not contain secret or sensitive data (which should be provided from a more secure option--Credstash, Vault, whatever). I could open-source all of my Chef cookbooks or Ansible playbooks and not have a security or correctness concern; this is pretty straightforward design.