This allows the following invocations:

    # Interactive use, like gpg
    ansible-vault encrypt --output x

    # Non-interactive, for scripting
    echo plaintext|ansible-vault encrypt --output x

    # Separate input and output files
    ansible-vault encrypt input.yml --output output.yml

    # Existing usage (in-place encryption) unchanged
    ansible-vault encrypt inout.yml

…and the analogous cases for ansible-vault decrypt as well.

In all cases, the input and output files can be '-' to read from stdin
or write to stdout. This permits sensitive data to be encrypted and
decrypted without ever hitting disk.

We don't need to keep creating VaultLibs everywhere, and we don't need
to keep checking for errors because VaultLib does it already.

fixes #12062

Fixes #11997

Also sets the max_fail_percentage value to the percent type.

ansible-lockdown added, minor editing

added info/link for ansible-lockdown to mailing list section, minor editing
(can't help myself it seems) to the paragraph about subscribing from a non-google account

fixes #12104

Vault cleanups, pass #1

Synchronize fix error

Now we don't have to recreate VaultEditor objects for each file, and so
on. It also paves the way towards specifying separate input and output
files later.

It's unused and unnecessary; VaultLib can decide for itself what cipher
to use when encrypting. There's no need (and no provision) for the user
to override the cipher via options, so there's no need for code to see
if that has been done either.

Fix the error:
 "RuntimeError: dictionary changed size during iteration"

Fixes #11981
Fixes #11995
Fixes #12039
Fixes #12077

also normalized -M option across all cli
fixes #12016

This bug was introduced in commit f8bf2ba1 on July 27.  Hasn't gone out
in a release yet.

Unicode and other fixes for vault

add option to ansible-vault to read new password from file for rekey

allow ansible to connect to docker containers (without using ssh)

The --new-vault-password-file option works the same as
--vault-password-file but applies only to rekeying (when
--vault-password-file sets the old password). Also update the manpage
to document these options more fully.

remove defaults from inhertiable fieldattributes to allow for proper detection and override

added block environment test