%aad_admins ALL=(ALL) NOPASSWD:ALL