%adm     ALL= NOPASSWD: /usr/sbin/ipsec down *, /usr/sbin/ipsec up *, /usr/sbin/service ipsec restart