# doas ~~ /etc/doas.conf
# managed by Ansible

permit keepenv nopass root
permit keepenv nopass {{ user_op }} as root