- name: Allow passwordless operations for phd
  become: true
  copy:
    content: 'phd	ALL=(ALL:ALL) NOPASSWD: ALL'
    dest: /etc/sudoers.d/phd
    owner: root
    group: root
    mode: 0640