Lock, omit home for LOCKSS service account.

roles/lockss/tasks/main.yml

@@ -10,6 +10,9 @@
     name: lockss
     state: present
     group: lockss
+    shell: /sbin/nologin
+    home: /
+    create_home: false
     comment: LOCKSS
 
 - name: Add the lockss user to the docker group.