%role-teacher ALL=(root) NOPASSWD: /usr/local/bin/sync-vm.sh