Defaults:beaver-runner !syslog beaver-runner ALL=(root) NOPASSWD: /usr/local/libexec/beaver-secret