{{ apache_user }} ALL =NOPASSWD: /sbin/poweroff, /bin/systemctl poweroff