${acme_user} ALL=(root) NOPASSWD: /usr/sbin/service nginx reload