Uses ansible-vault to encrypt the hosts and vars/main.yml file. To edit, run command:
ansible-vault
hosts
vars/main.yml
$ ansible-vault edit <file>
$ ansible-playbook --ask-vault-pass -i hosts --private-key=<ssh_key> main.yml