Create a new file

ansible-vault create group_vars/windows.yml

Use a file

ansible -m setup --tree out/ --ask-vault-pass windows