Right now we have a script in each of the filestore repos called `ansible_workspace_init`. This script has some issues:

• it requires you to be able to decypt the repo, despite not being sensitive
• it is duplicated in 3 repos, despite not being very different
• it requires you clone some of the things you're about to clone again

We should extract this to a tool / container to build out the CentOS Ansible structure, assuming the user has been given full git-crypt rights.