# "wg show" and subcommands command may be run by anyone in the group "wireguard"

%wireguard ALL=(ALL) NOPASSWD: /usr/bin/wg show