It's better, so a user can regenerate passwords and keys as needed by just running the playbook/role.