Skip the special LOCAL service

Credentials with service=LOCAL do not have a corresponding float
service, they are system-level credentials. Do not attempt to restart
the LOCAL systemd service.

roles/credentials/tasks/main.yml

@@ -96,7 +96,7 @@
     # This should use the systemd module but it doesn't take lists of services.
     - name: "Restart associated services"
       shell: "systemctl restart {{ services[item.0.service].systemd_services | join(' ') }}"
-      when: "item.1.changed"
+      when: "item.1.changed and item.0.service != 'LOCAL'"
       loop: "{{ credentials | zip(x509_sign.results) | list }}"
 
   rescue: