Pare down ignore list for ansible-lint

.ansible-lint

@@ -20,3 +20,7 @@ mock_roles:
 warn_list:
   # I'm aware of the risks and accept them
   - package-latest
+  # There is exactly one occurence of this and it's for faulty web installers
+  - ignore-errors
+  # These tend to be pretty buggy
+  - experimental

roles/grub/tasks/main.yml

@@ -4,5 +4,5 @@
 - name: configure grub
   block:
     - name: template out grub config
-      template: src=grub.conf dest=/etc/default/grub
+      template: src=grub.conf dest=/etc/default/grub mode=0644
       notify: grub mkconfig