set using sudo at the playbook level