update_cache directly in the apt task, apply sudo at the playbook level