diff --git a/tasks/cloud_setup_basic.yml b/tasks/cloud_setup_basic.yml
index 88d1f56a3c..8c6cc5d274 100644
--- a/tasks/cloud_setup_basic.yml
+++ b/tasks/cloud_setup_basic.yml
@@ -31,6 +31,12 @@
   tags:
   - config
 
+# note - kinda should be a handler - but handlers need args
+- name: restorecon
+  action: command restorecon -R /root/.ssh
+  tags:
+  - config
+
 - name: put /dev/vda2 up as /mnt
   action: mount name=/mnt src=/dev/vda2 fstype=ext3 passno=1 dump=1 state=mounted