Tasks that install packages need to be tagged as `install` so they can be skipped by Jenkins daily runs.
The *sudo* role installs `sudo` and configures policy for it. By default, users who are members of the *sudo* group can run any command as root.