IdM role needs to be idempotent

[oybed]

When running the IdM role against a server that's already set up as an IdM, it fails that host. This should not happen. I.e.: need to check if the server is already configured and if so (successfully) skip the host.

Also, some of the tasks currently uses ignore_errors and this should probably not be done.