remove the key file from localhost

roles/generate-cert/tasks/main.yml

@@ -30,3 +30,13 @@
     group: "{{ group | default('root') }}"
     mode: "{{ key_mode | default('u=rw,g=,o=') }}"
   when: not key_file.stat.exists
+
+
+# Clean up
+- name: Remove the local cert key
+  become: false
+  file:
+    path: "/tmp/ansible_hacky_pki_{{ cname }}.key"
+    state: absent
+  delegate_to: localhost
+  when: not key_file.stat.exists