ansible-hardening role hook in tripleo quickstart

This blueprint seeks to provide a hook to allow the ansible-hardening role [1] to perform systems security hardening in tripleo-quickstart deployments.

This will allow operators to automate systems hardening and reach security compliance for standards such as DISA STIG and the OpenStack Security Guides recommended check lists.

Initial idea is to create new tags such as 'undercloud-hardening' and 'overcloud-hardening' which include the anisble-hardening role.

Also provide a means for performing an audit using checkmode [2]

The ansible-hardening role is an exsiting OpenStack project [1]

[1] https://docs.openstack.org/developer/ansible-hardening/

[2] http://docs.ansible.com/ansible/playbooks_checkmode.html