doas

Basic doas.conf

permit :wheel

No password

permit nopass :wheel

Cache passwords

permit persist :wheel

Allow specific command

permit nopass :upgraders as root cmd /bin/apt args upgrade