set basename the same way we do for ansible-private