ops ALL=(root) NOPASSWD: \
    NOEXEC: /usr/bin/less /a