# Permit the unprivileged sync daemon to quiesce RepoGoon only while replacing
# an explicitly enabled SQLite replica. No other systemctl action is allowed.
repogoon ALL=(root) NOPASSWD: /usr/bin/systemctl stop repogoon.service
repogoon ALL=(root) NOPASSWD: /usr/bin/systemctl start repogoon.service
