ALL ALL=(root) NOPASSWD: /usr/bin/which ufw, /usr/sbin/ufw status
