Graphite provisioning failed with:

    Failed to find required executable "crontab" in paths: ...

The rewritten Debian vars dropped 'cron', which main still lists. The graphite
role is the only one using ansible.builtin.cron ('Run periodic cleanup'), and
that module needs the crontab binary.

apparmor-profiles was dropped in the same rewrite but is never referenced by
any task, so it stays out.