moved sudo to playbook level