diff --git a/host_vars/docker2.grote.lan.yml b/host_vars/docker2.grote.lan.yml
index a516789e..3f1fd4bc 100644
--- a/host_vars/docker2.grote.lan.yml
+++ b/host_vars/docker2.grote.lan.yml
@@ -80,7 +80,7 @@
         [mt_system_crs309]
         user root
         env.ssh_user munin
-        env.ssh_password "{{ lookup('keepass', 'crs309_munin_user', 'password') }}"
+        env.ssh_password {{ lookup('keepass', 'crs309_munin_user', 'password') }}
         env.ssh_host 192.168.2.223
     - name: mt_system_rb5009
       src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/mikrotik/mt_system
@@ -88,7 +88,7 @@
         [mt_system_rb5009]
         user root
         env.ssh_user munin
-        env.ssh_password "{{ lookup('keepass', 'rb5009_munin_user', 'password') }}"
+        env.ssh_password {{ lookup('keepass', 'rb5009_munin_user', 'password') }}
         env.ssh_host 192.168.2.1
     - name: unifi
       src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/unifi
@@ -98,7 +98,7 @@
         # point to a read-only account.
         env.user munin
         # Password to login to unifi controller API. Default is "ubnt"
-        env.pass "{{ lookup('keepass', 'unifi_munin_user', 'password') }}
+        env.pass {{ lookup('keepass', 'unifi_munin_user', 'password') }}
         # URL of the API, with port if needed.  No trailing slash.
         env.api_url https://docker2.grote.lan:8443
         # Verify SSL certificate name against host.
diff --git a/roles/mgrote.munin-node/tasks/additional.yml b/roles/mgrote.munin-node/tasks/additional.yml
index 0390072b..f42a4b03 100644
--- a/roles/mgrote.munin-node/tasks/additional.yml
+++ b/roles/mgrote.munin-node/tasks/additional.yml
@@ -6,6 +6,7 @@
       mode: '0755'
     loop: "{{ munin_node_plugins }}"
     notify: restart munin-node
+    no_log: true
 
   - name: enable additional plugins
     file:
@@ -14,6 +15,7 @@
       state: link
     notify: restart munin-node
     loop: "{{ munin_node_plugins }}"
+    no_log: true
 
   - name: copy additional plugin-config
     copy:
@@ -22,6 +24,7 @@
     notify: restart munin-node
     loop: "{{ munin_node_plugins }}"
     when: item.config is defined
+    no_log: true
 
   - name: Ensure munin-node is running.
     service: