Make onboaring role idempotent and increase performance

The onboarding role design isn't idempotent at the moment. Not sure, how to do that. Maybe start with an password- and ssh-login-check.

Maybe this job should break in a case when the default-password isn't set?

Restructuring the tasks to reduce reboots.