apache config group has sudo access to apachectl only