diff --git a/tasks/section_5/cis_5.3.3.1.x.yml b/tasks/section_5/cis_5.3.3.1.x.yml
index 19e1c44..1730521 100644
--- a/tasks/section_5/cis_5.3.3.1.x.yml
+++ b/tasks/section_5/cis_5.3.3.1.x.yml
@@ -24,7 +24,7 @@
       ansible.builtin.replace:
         path: "/etc/pam.d/{{ item }}-auth"
         regexp: ^(\s*auth\s+(requisite|required|sufficient)\s+pam_faillock\.so)(.*)\s+deny\s*=\s*\S+(.*$)
-        replace: \1\2\3
+        replace: \1 \2\3
       loop:
         - password
         - system
@@ -126,4 +126,3 @@
       loop:
         - password
         - system
-      notify: Authselect update