diff --git a/letsencrypt-acmetool-client/defaults/main.yml b/letsencrypt-acmetool-client/defaults/main.yml
index bbf2d4b9..bc7903da 100644
--- a/letsencrypt-acmetool-client/defaults/main.yml
+++ b/letsencrypt-acmetool-client/defaults/main.yml
@@ -2,7 +2,11 @@
 letsencrypt_acme_install: False
 # Set to false if a binary installation is needed (unsupported distributions)
 letsencrypt_pkg_install: True
-letsencrypt_acme_ppa_repo: 'ppa:hlandau/rhea'
+letsencrypt_acme_pkg_state: latest
+letsencrypt_acme_pkgs:
+  - acmetool
+  - libcap2-bin  
+ letsencrypt_acme_ppa_repo: 'ppa:hlandau/rhea'
 letsencrypt_acme_debian_repo: 'deb http://ppa.launchpad.net/hlandau/rhea/ubuntu xenial main'
 letsencrypt_acme_debian_repo_key: '9862409EF124EC763B84972FF5AC9651EDB58DFA'
 letsencrypt_acme_user: acme
diff --git a/letsencrypt-acmetool-client/tasks/main.yml b/letsencrypt-acmetool-client/tasks/main.yml
index 74d9e2bf..98cbdf12 100644
--- a/letsencrypt-acmetool-client/tasks/main.yml
+++ b/letsencrypt-acmetool-client/tasks/main.yml
@@ -35,8 +35,9 @@
   when: letsencrypt_acme_install
   tags: letsencrypt
 
-- name: Install the letsencrypt acmetool package
-  apt: pkg=acmetool state=installed
+- name: Install the letsencrypt acmetool package and some deps
+  apt: pkg={{ item }} state={{ letsencrypt_acme_pkg_state }}
+  with_items: '{{ letsencrypt_acme_pkgs }}'
   when:
     - letsencrypt_acme_install
     - letsencrypt_pkg_install