nfs-client: enable rpc-svcgssd iff we use kerberized NFS

nfs-client/defaults/main.yml

@@ -2,3 +2,4 @@
 
 nfs_enable_cifs: false
 nfs_enable_quota: false
+nfs_enable_gss: true

nfs-client/tasks/main.yml

 ---
-# file: roles/nfs-client/tasks/main.yml
 
 - name: ensure nfs client utils are installed
   apt:
@@ -101,6 +100,13 @@
     - nfs-client
     - sysctl
 
+- name: enable rpc-svcgssd iff we use kerberized NFS
+  systemd:
+    name: rpc-svcgssd.service
+    masked: "{{ not nfs_enable_gss }}"
+  tags:
+    - nfs-client
+
 - name: ensure nfs-common is enabled
   service:
     name: nfs-client.target
@@ -206,5 +212,3 @@
   tags:
     - nfs-client
     - umask
-
-- meta: flush_handlers