diff --git a/roles/baseline/tasks/lockdown.yml b/roles/baseline/tasks/lockdown.yml
index e47a3b1..526991f 100644
--- a/roles/baseline/tasks/lockdown.yml
+++ b/roles/baseline/tasks/lockdown.yml
@@ -33,4 +33,6 @@
     # domain automatically configures SSSD authentication on your host.
     rhel9cis_allow_authselect_updates: false
     rhel9cis_auditd_max_log_file_action: rotate
+    # The following is for some reason not set as a default
+    rhel9cis_sudoers_exclude_nopasswd_list: []
   when: (ansible_distribution == "Rocky") and (ansible_distribution_major_version == "9")