deny :docker
permit nopass persist linus as root
#deny stallman
permit :wheel persist
permit nvidia as fu