diff --git a/sos/report/plugins/ansible.py b/sos/report/plugins/ansible.py
index 5991b7862e..d4bceb1cb3 100644
--- a/sos/report/plugins/ansible.py
+++ b/sos/report/plugins/ansible.py
@@ -29,7 +29,11 @@ def setup(self):
             "ansible --version"
         ])
 
-        # let rhui plugin collects the RHUI specific files
-        self.add_forbidden_path("/etc/ansible/facts.d/rhui_*.fact")
+        # don't generic & collect potentially sensitive files and dirs
+        self.add_forbidden_path([
+            "/etc/ansible/facts.d/",
+            "/etc/ansible/roles/",
+            "/etc/ansible/hosts",
+        ])
 
 # vim: set et ts=4 sw=4 :