You forgot that it can run without ssh set up, by installing ansible on the machines and letting them poll for changes.