diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index d2e97a56bd..d98789996c 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -56,7 +56,7 @@
     hbacsvcgroup:
       - Sudo
   notify: clean sss caches
-  #no_log: true
+  no_log: true
   loop: "{{ ipa_servers }}"
   when: ipa_servers is defined
 
diff --git a/roles/ipa/client/tasks/main.yml b/roles/ipa/client/tasks/main.yml
index 724f890d52..5d8c19b15d 100644
--- a/roles/ipa/client/tasks/main.yml
+++ b/roles/ipa/client/tasks/main.yml
@@ -58,7 +58,7 @@
   run_once: yes
 
 - name: Configure sudo on IPA cluster
-  delegate_to: "{{ ipa_server }}"
+  #delegate_to: "{{ ipa_server }}"
   import_tasks: sudo.yml
   tags:
     - ipa/client