Replace deprecated always_run with check_mode

Author: jbenden

tasks/main.yml

@@ -4,10 +4,10 @@
 
 - name: test to see if selinux is running
   command: getenforce
+  check_mode: false
   register: sestatus
   failed_when: false
   changed_when: false
-  always_run: true
 
 - name: install selinux dependencies when selinux is installed on RHEL or Oracle Linux
   yum: name="{{item}}" state=installed
@@ -41,10 +41,10 @@
 
 - name: check if ssh_password module is already installed
   shell: "semodule -l| grep ssh_password"
+  check_mode: false
   register: ssh_password_module
   failed_when: false
   changed_when: false
-  always_run: true
 
 # The following tasks only get executed when selinux is in state enforcing, UsePam is "no" and the ssh_password module is installed.
 # See this issue for more info: https://github.com/hardening-io/ansible-ssh-hardening/issues/23