idunn ALL=(root) NOPASSWD: /usr/local/libexec/idunn-yggdrasil *