nobody  ALL=NOPASSWD: /usr/sbin/ipsec status
