%build  ALL=(nobody)  NOPASSWD: /full/path/to/script