diff --git a/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml b/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
index f8ea4dd..0846702 100644
--- a/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
+++ b/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
@@ -60,18 +60,19 @@
   when: "['/pool/gpu', pve_healer_user, pve_healer_role] not in pve_access.acl"
   changed_when: true
 
-- name: Healer-Token lesen
+- name: Healer-Token lesen (Benutzer fehlt im Probelauf noch)
   ansible.builtin.command: pveum user token list {{ pve_healer_user }} --output-format json
   register: healer_tokens
   check_mode: false
   changed_when: false
+  failed_when: false
 
 - name: Healer-Token anlegen (Geheimnis nur einmal sichtbar)
   ansible.builtin.command: >
     pveum user token add {{ pve_healer_user }} {{ pve_healer_token }} --privsep 0
     --comment "knaster Healer auf infra" --output-format json
   register: healer_token_new
-  when: healer_tokens.stdout | from_json | selectattr('tokenid', 'equalto', pve_healer_token) | list | length == 0
+  when: (healer_tokens.stdout or '[]') | from_json | selectattr('tokenid', 'equalto', pve_healer_token) | list | length == 0
   no_log: true
   changed_when: true