diff --git a/roles/bootstrap/tasks/dnf.yml b/roles/bootstrap/tasks/dnf.yml
index 3c9744c..acaaeae 100644
--- a/roles/bootstrap/tasks/dnf.yml
+++ b/roles/bootstrap/tasks/dnf.yml
@@ -35,4 +35,4 @@
         enabled: true
   when:
     - auto_update is defined
-    - auto_update | bool
+    - auto_update is truthy(convert_bool=True)
diff --git a/roles/create-user/tasks/main.yml b/roles/create-user/tasks/main.yml
index cfda9e7..15362ac 100644
--- a/roles/create-user/tasks/main.yml
+++ b/roles/create-user/tasks/main.yml
@@ -32,6 +32,7 @@
 
 - name: "Copy '~/.ssh/id_*.pub' (on controller) to authorized_keys for '{{ create_username }}'"
   tags: ['keys']
+  become: true
   ansible.posix.authorized_key:
     user: "{{ create_username }}"
     state: present