---
- name: Create unprivileged authority account
  ansible.builtin.user:
    name: railiance-clock
    system: true
    shell: /usr/sbin/nologin
    create_home: false
- name: Create root-owned install tree
  ansible.builtin.file:
    path: "{{ railiance_clock_install_root }}"
    state: directory
    owner: root
    group: root
    mode: '0755'
- name: Create private signing-key directory
  ansible.builtin.file:
    path: "{{ railiance_clock_state_root }}"
    state: directory
    owner: railiance-clock
    group: railiance-clock
    mode: '0700'