oh well, about to go into a tunnel and then a SRE meetup, here's where I got so far with sudoers https://gist.github.com/arubdesu/65729a232324c2905c0e2f357de7733e