when: (ferm and ((ansible_local is undefined or
  (ansible_local is defined and ansible_local.cap12s is undefined or
  (ansible_local.cap12s is defined and (not ansible_local.cap12s.enabled or
  (ansible_local.cap12s.enabled and 'cap_net_admin' in ansible_local.cap12s.list))))) or ferm_ignore_cap12s))


when: (ferm and ((ansible_local is defined and ansible_local.cap12s is defined
  and (not ansible_local.cap12s.enabled or 'cap_net_admin' in ansible_local.cap12s.list)))) or ferm_ignore_cap12s))

when: (ferm and ((ansible_local|d() ansible_local.cap12s|d()
  and (not ansible_local.cap12s.enabled or 'cap_net_admin' in ansible_local.cap12s.list)))) or ferm_ignore_cap12s))