sssd: Use command instead of shell

roles/sssd/tasks/main.yml

@@ -20,9 +20,13 @@
     enabled: true
 
 - name: Get current state of authselect
-  ansible.builtin.shell:
+  ansible.builtin.command:
-    cmd: /usr/bin/authselect current --raw ; /bin/true
+    argv:
+      - /usr/bin/authselect
+      - current
+      - --raw
   register: result
+  failed_when: false
   check_mode: false
   changed_when: false
 
@@ -33,4 +37,6 @@
       - select
       - sssd
       - --force
+  register: result
+  changed_when: result.rc == 0
   when: result.stdout.split()[0] != "sssd"