+# security
+%security klecker=(dak) NOPASSWD: /usr/local/bin/dak new-security-install -[AR] -- *
+%sec_public klecker=(dak) NOPASSWD: /usr/local/bin/dak new-security-install -[AR] -- *
+%sec_data klecker=(archvsync) NOPASSWD: /home/archvsync/security/signal ""
+dak klecker=(archvsync) NOPASSWD: /home/archvsync/signal_security
+# web stuff
+debwww klecker=(archvsync) NOPASSWD: /home/archvsync/webmirrors/runmirrors
+# more list stuff:
+%list liszt=(root) /usr/sbin/postfix reload
+%list liszt=(root) /usr/sbin/qshape, /usr/sbin/postsuper
+%list liszt=(root) /etc/init.d/spamassassin, /etc/init.d/amavis
+%list liszt=(amavis) NOPASSWD: /usr/bin/sa-learn
+%list liszt=(amavis) ALL