ansible-vault encrypt --vault-id prod@~/.vault_prod secrets_prod.yml
ansible-playbook site.yml --vault-id prod@~/.vault_prod