diff --git a/roles/dev_env/defaults/main.yml b/roles/dev_env/defaults/main.yml
index 70f2e97..5f6a982 100644
--- a/roles/dev_env/defaults/main.yml
+++ b/roles/dev_env/defaults/main.yml
@@ -14,6 +14,7 @@ dev_env__packages:
   - tmux
   - git
   - stow
+  - acl              # lets Ansible become_user an unprivileged user (sjat -> claude) for file copies
   - build-essential
   - curl
   - ca-certificates