*sigh* Make deploy a NOPASSWD sudoer, since that's what Capistrano expects.