# omarchy-sudo-passwordless creates grants in this owned filename namespace.
# Transient expiry timers do not survive reboot, so early boot removes every
# remaining grant. The boot-only modifier prevents later tmpfiles runs from
# shortening a live, explicitly requested window.
r! /etc/sudoers.d/99-omarchy-nopasswd-*