Agent to manager per app sudoers rules