diff --git a/roles/1-prep/tasks/main.yml b/roles/1-prep/tasks/main.yml
index 418510c90..e518689c4 100644
--- a/roles/1-prep/tasks/main.yml
+++ b/roles/1-prep/tasks/main.yml
@@ -95,6 +95,12 @@
     dest: /etc/chrony.conf
     backup: no
 
+# Debian 10 "Buster" is apparently enabling AppArmor in 2019:
+# https://wiki.debian.org/AppArmor/Progress
+# https://wiki.debian.org/AppArmor/HowToUse
+# https://packages.debian.org/buster/apparmor
+# Curiously this has NOT stopped IIAB 7.0/master from working on Debian 10
+# pre-releases, during @floydianslips' March 2019 testing anyway!
 - name: Disable AppArmor -- override OS default (ubuntu)
   service:
     name: apparmor