Making adjustments to PAM configuration can be very
dangerous for a production system, so the Ansible task runs a
check for text matching nullok in
/etc/pam.d/common-auth (different than
/etc/pam.d/system-auth found in RHEL 6) and prints a
warning if it is found.