Too complicated support that feature

It seems that "before" looks like "depends" vice versa. Lets try it that way.

Role_name have to be differed from Service name cause ansible will search role by static name

Technically option is passed as environment variable TOWER_SHOW_SECRETS.
That variable should be parsed and reversed in ansible playbook.
It has to be passed to templates tasks with no_log: var_name