Remove deprecated and unused VaultAES encryption code

fixed hostvars access in conjunction with --limit usage

Note that this test was broken in devel because it was really just
duplicating the AES256 test because setting v.cipher_name to 'AES'
no longer selected AES after it was de-write-whitelisted.

Now that we've removed the VaultAES encryption code, we embed static
output from an earlier version and test that we can decrypt it.

Now that VaultLib always decides to use AES256 to encrypt, we don't need
this broken code any more. We need to be able to decrypt this format for
a while longer, but encryption support can be safely dropped.

fixes #12062

Fixes #11997

Also sets the max_fail_percentage value to the percent type.

ansible-lockdown added, minor editing

added info/link for ansible-lockdown to mailing list section, minor editing
(can't help myself it seems) to the paragraph about subscribing from a non-google account

fixes #12104

Vault cleanups, pass #1

Synchronize fix error

Now we don't have to recreate VaultEditor objects for each file, and so
on. It also paves the way towards specifying separate input and output
files later.

It's unused and unnecessary; VaultLib can decide for itself what cipher
to use when encrypting. There's no need (and no provision) for the user
to override the cipher via options, so there's no need for code to see
if that has been done either.

Fix the error:
 "RuntimeError: dictionary changed size during iteration"

Fixes #11981
Fixes #11995
Fixes #12039
Fixes #12077

also normalized -M option across all cli
fixes #12016

This bug was introduced in commit f8bf2ba1 on July 27.  Hasn't gone out
in a release yet.

Unicode and other fixes for vault

add option to ansible-vault to read new password from file for rekey

allow ansible to connect to docker containers (without using ssh)

The --new-vault-password-file option works the same as
--vault-password-file but applies only to rekeying (when
--vault-password-file sets the old password). Also update the manpage
to document these options more fully.

remove defaults from inhertiable fieldattributes to allow for proper detection and override