postgres ALL=(ALL) NOPASSWD: /usr/bin/arping, /bin/systemctl * postgres*