diff --git a/roles/robosignatory/tasks/main.yml b/roles/robosignatory/tasks/main.yml
index 17e18ab93d..e0524751f7 100644
--- a/roles/robosignatory/tasks/main.yml
+++ b/roles/robosignatory/tasks/main.yml
@@ -190,3 +190,14 @@
   tags:
   - config
   - robosignatory
+
+- name: Allow robosignatory to use systemd-ask-password
+  acl:
+    path: /run/systemd/ask-password
+    entity: robosignatory
+    etype: user
+    permissions: rwx
+    state: present
+  tags:
+  - config
+  - robosignatory