allow service user to use sudo to restart itself