permit nopass linus as root
deny :docker
#deny jane
permit persist :wheel
permit jane as doe