<!-- @format -->
The names may not contain a dot, the RHEL sudo is wheel (not to be confused
with Debian's passwordless sudo) and the proper permissions are 0400.