properly elevate permissions everywhere

deploy.yaml

@@ -34,6 +34,7 @@
         owner: root
         group: root
         mode: "0644"
+      become: true
       notify: Restart Kea DHCP 4 server
       
   handlers:
@@ -41,10 +42,10 @@
       ansible.builtin.service:
         name: kea-dhcp4-server
         state: restarted
+      become: true
 
 - name: Deploy Unbound DNS
   hosts: resolv-dns
-  become: true
   tasks:
     - name: deploy unbound server config
       ansible.builtin.copy:
@@ -53,6 +54,7 @@
         owner: root
         group: root
         mode: "0644"
+      become: true
       notify: Restart Unbound
       loop:
         - local-data.conf
@@ -63,3 +65,4 @@
       ansible.builtin.service:
         name: unbound
         state: restarted
+      become: true