diff --git a/roles/iiab-admin/tasks/sudo-prereqs.yml b/roles/iiab-admin/tasks/sudo-prereqs.yml
index 66c790d0a..b3e079c92 100644
--- a/roles/iiab-admin/tasks/sudo-prereqs.yml
+++ b/roles/iiab-admin/tasks/sudo-prereqs.yml
@@ -1,7 +1,6 @@
-# roles/2-common/tasks/packages.yml also installed sudo, but that's too late
 - name: 'Install package: sudo'
   package:
-    name: sudo
+    name: sudo    # (1) Should be installed prior to installing IIAB, (2) Can also be installed by roles/1-prep's roles/openvpn/tasks/install.yml, (3) Is definitely installed by 1-prep here
 
 - name: Temporarily make file /etc/sudoers editable (0640)
   file: