diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index d2e97a56bd..d98789996c 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -56,7 +56,7 @@
     hbacsvcgroup:
       - Sudo
   notify: clean sss caches
-  #no_log: true
+  no_log: true
   loop: "{{ ipa_servers }}"
   when: ipa_servers is defined