Defaults!/usr/bin/env env_keep += "REF"
ops ALL=(root) NOPASSWD: /usr/bin/env
ops ALL=(root) NOPASSWD: /usr/bin/printenv