Setting different permissions for a dir and subdir idempotently via ansible

Question

I have a configuration like this to manage websites\' permisisons:

nginx_sysuser: \'www-data\'
nginx_acls:
    - { path: "/var/www/webroot/", perm: