Please consider Ansible version bump for CVE-2019-10156

[vielmetti]

I'm getting reports from a Github security scan about Ansible, specifically related to CVE-2019-10156. The recommendation is to bump to 2.7.12.

The current requirements.txt pins to 2.7.8. The changelog at https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst shows a bunch of changes since .8 - the .11 to .12 change however is just this security fix.

The last issue that addressed version pinning was #4783 which warned that Ansible at 2.8.x is not yet supported, specifically noted at #4908 and #4778 .