Passwordless sudo is a price to pay

roles/05_packages/tasks/aur.yml

@@ -9,4 +9,6 @@
   kewlfft.aur.aur:
     name: "{{ aur_packages }}"
     state: present
-    use: "{{ aur_helper }}"
+    use: "{{ aur_helper }}"
+  become: true
+  become_user: "{{ user.name }}"    

roles/07_user/tasks/main.yml

@@ -22,6 +22,6 @@
 - name: Setup sudo
   ansible.builtin.copy:
     dest: /etc/sudoers.d/{{ user.name }}
-    content: "{{ user.name }} ALL=(ALL:ALL) ALL"
+    content: "{{ user.name }} ALL=(ALL:ALL) NOPASSWD: ALL"
     mode: 0440
     validate: /usr/sbin/visudo -cf %s