Defaults:mycert env_check="CERTBOT_DOMAIN CERTBOT_TOKEN CERTBOT_VALIDATION"

mycert ALL=(:bind) NOPASSWD: /usr/local/bin/_acme-challenge_helper
mycert ALL=(bind) NOPASSWD: /usr/local/bin/_acme-challenge_helper
mycert ALL=(root) NOPASSWD: /usr/local/bin/_acme-challenge_helper