deploy ALL=(root) NOPASSWD: /usr/bin/systemctl, /usr/sbin/service