WinRM : certificate ignore option does not work from playbook

Hello

I’m trying to configure windows plays to ignore the self-signed certificate from the playbook, but this is not working (I get CERTIFICATE_VERIFY_FAILED if I rely on the playbook var)

However, if I set the same option in the inventory, I do not get this error (I get win_file not being able to create file, but that’s a different matter altogether)

Playbook contents:

As far as I know the connection variables belong in inventory or group_vars or set as host_vars.