Warn about NOPASSWD usage

It's not secure to encourage users to use NOPASSWD. We should at least warn them about possible vulnerabilities.