%wheel ALL=(ALL) NOPASSWD: /usr/bin/bootc update, /usr/bin/bootc status
