https://apple.stackexchange.com/a/82527
visudo
user1 ALL=(user2) NOPASSWD: /bin/bash
sudo -u service touch test.txt