- hosts: all roles: - revoke-sudo