allow any user to get ceph mon_status via sudo