use sudo: True as default for all roles