diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index 10d5fe2e78..91aa040d22 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -56,7 +56,7 @@
     hbacsvcgroup:
       - Sudo
   notify: clean sss caches
-  no_log: false
+  no_log: true
   loop: "{{ ipa_servers }}"
   when: ipa_servers is defined