diff --git a/enroll/jinjaturtle.py b/enroll/jinjaturtle.py
index dd69121..1f9248e 100644
--- a/enroll/jinjaturtle.py
+++ b/enroll/jinjaturtle.py
@@ -137,6 +137,13 @@ _JINJA_BUILTIN_GLOBAL_NAMES = frozenset(
         "config",
         "self",
         "cycle",
+        # Ansible global set
+        "lookup",
+        "q",
+        "query",
+        "now",
+        "omit",
+        "undef",
     }
 )