use listen directive for handlers

ad-auth/handlers/main.yml

@@ -5,17 +5,20 @@
   file:
     path: /var/lib/pam/
     state: "{{ item }}"
-    mode: 0755
+    mode: "0755"
     owner: root
     group: root
   with_items:
     - absent
     - directory
+  listen: "regenerate pam config"
 
-- name: regenerate pam config
-  shell: rm -f /var/lib/pam/* && pam-auth-update --force
+- name: update pam
+  command: pam-auth-update --force
   environment:
     DEBIAN_FRONTEND: noninteractive
+  listen: "regenerate pam config"
+
 
 - name: clear sssd cache
   command: sss_cache -E