This patch should migrate to the new devsec.hardening collection, which failed in a previous attempt[1] due to a bug in the collection. It should now be updated and working with Ansible 2.9.
1: 234c93c2
This reverts commit 629f2ebf.