https://apple.stackexchange.com/a/82527
visudo
user1 ALL=(user2) NOPASSWD: /bin/bash
amy ALL=(ALL) NOPASSWD:ALL
sudo -u service touch test.txt