add more restrictive sudo access to non-roots
Merge pull request #446 from Orain/privs

add more restrictive sudo access to non-roots