Remove the embedded password hash from the guest-overlay role. Instead generate that specific hash on task execution. Doesn't change the hardcoded guest password, but makes the same information more readable.
