Script de wrapper para recuperar facilmente uma senha de seu chaveiro do OS X e usá-la com ansible-vault:
#!/usr/bin/env bash
tmpfile=$(mktemp -t vault)
ensure_tmpfile_gets_removed() {
rm -f $tmpfile
}
trap ensure_tmpfile_gets_removed EXIT
echo $(security find-generic-password -a ansible_vault -w) > $tmpfile
command="$1"
shift
args=$@
ansible-vault $command $args --vault-password-file $tmpfile