Create role to set network manager policies for VPN aware VMs

[sfloess]

When one has a VM where they'd like to use nmcli to start/stop a VPN, one must modify the file /usr/share/polkit-1/actions/org.freedesktop.NetworkManager.policy.

In particular the following actions require modification:

<action id="org.freedesktop.NetworkManager.network-control">
...
    <defaults>
        <allow_any>yes</allow_any>
...

<action id="org.freedesktop.NetworkManager.settings.modify.system">
...
    <defaults>
        <allow_any>yes</allow_any>
...

The Ansible xml module looks like a promising solution to change the aforementioned values.