how do you run ansible?

I generally recommend using SSH agent with a encrypted key. Whether
or not you use sudo is up to you.

You can specify both passwords via the API if you don't want to prompt
for it, so I'm throwing that out there as an option. (You cannot,
however, specify them on the command line)

Of potential interest to scripting use cases, In 0.9, the
ansible-commander web service (which is evolving and not ready for
use) will also allow users to launch playbooks via REST and will take
care of adding keys to SSH-agent for you.

Should you not need any of the multi-node configuration use cases,
ansible-pull can also run against git+cron and wouldn't require
supplying any credentials.

It depends on your environment basically, and what you are comfortable
with in terms of key security.

Ok thanks for the info. I’m still feeling this out, so I’m not sure how the environment 's gonna look in the end.

That ansible-commander looks very interesting, I’ll be keeping my eye on that.