---
- name: Fix the offending noisy policies with exclusion scopes
  hosts: workstation.lab.example.com
  gather_subset: min
  become: no
  roles:
#    - role: check-env
#      tags: check
    - role: fix-policies
      tags: configure
...