diff --git a/roles/openvpn/tasks/install.yml b/roles/openvpn/tasks/install.yml
index 7a6f67fa3..5973bc09f 100644
--- a/roles/openvpn/tasks/install.yml
+++ b/roles/openvpn/tasks/install.yml
@@ -3,7 +3,7 @@
     name:
       - nmap
       - openvpn
-      - sudo    # Should already be installed (prior to installing IIAB) but let's also make it explicit here.  See also roles/2-common/tasks/packages.yml
+      - sudo    # (1) Should be installed prior to installing IIAB, (2) Can also be installed by 1-prep here, (3) Is definitely installed by 1-prep's roles/iiab-admin/tasks/sudo-prereqs.yml
     state: present
 
 # Newer versions of NMap do not include NCat, needed to announce /etc/iiab/openvpn_handle