diff --git a/playbooks/roles/gpg/tasks/main.yml b/playbooks/roles/gpg/tasks/main.yml
index 8f8883362..782154c3c 100644
--- a/playbooks/roles/gpg/tasks/main.yml
+++ b/playbooks/roles/gpg/tasks/main.yml
@@ -39,9 +39,13 @@
     mode: 0750
 
 - name: "Ensure a GPG agent is running"
+  become_user: root
+  become: true
   command: "gpgconf --launch gpg-agent"
 
 - name: "Reload gpg-agent to pick up configuration changes"
+  become_user: root
+  become: true
   command: "gpgconf --reload gpg-agent"
 
 # It turns out that "--reload" doesn't work on dirmngr.