include credentials only once

play.yml

@@ -7,6 +7,9 @@
     domains:
       - sampledomain.local
   tasks:
+    - name: import cloudflare creds
+      include_vars:
+        file: "~/.cloudflare.yml"
     - name: "enforce state for {{item}}"
       include_role:
         name: create-records

roles/create-records/tasks/main.yml

@@ -1,9 +1,5 @@
 ---
 
-- name: import cloudflare creds
-  include_vars:
-    file: "~/.cloudflare.yml"
-
 - name: "create records ({{domain}})"
   cloudflare_dns:
     zone: "{{ domain }}"