provision: role vars are now legit super evil, confirmed by Ansible 2.1.0.0 They are so extremely high-priority now that they cannot be redefined in a playbook. At least defaults should work as expected?