Remove entries with regexp regardeless of password specified, fix mode

tasks/main-blivet.yml

@@ -145,10 +145,14 @@
 - name: manage /etc/crypttab to account for changes we just made
   lineinfile:
     path: /etc/crypttab
+    # The line option is used when `state: present`
     line: "{{ entry.name }} {{ entry.backing_device }} {{ entry.password }}"
+    # The regexp option is used when `state: absent` to remove entries
+    # regardless of password
+    regexp: ^{{ entry.name }} {{ entry.backing_device }}
     state: "{{ entry.state }}"
     create: true
-    mode: "{{ __storage_crypttab.stat.mode | d('0600') }}"
+    mode: "{{ __storage_crypttab.stat.mode | d('0644') }}"
     owner: "{{ __storage_crypttab.stat.owner | d('root') }}"
     group: "{{ __storage_crypttab.stat.group | d('root') }}"
   loop: "{{ blivet_output.crypts }}"