permit :wheel
permit nopass root
{% if sysadmin_username is defined %}
permit nopass {{ sysadmin_username }}
{% endif %}