It's also possible to craft a fine-grained sudo policy instead of allowing carte blanche access.