+# geodns may reload bind
+geodnssync geo1,geo2,geo3=(root) NOPASSWD: /etc/init.d/bind9 reload
+geodnssync geo1,geo2,geo3=(root) NOPASSWD: /usr/sbin/rndc reconfig
+# archvsync triggers snapshot
+archvsync stabile=(snapshot) NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger