Update information on CVE-2019-10217/ansible

The GCP IAM role was only introduced in the 2.8 series and not
backported to older brnaches. The GCP IAM role addition introduces the
problematic load.

Mark stretch and buster as not affected.