Cmnd_Alias ZONE_RELOAD = /usr/sbin/knotc zone-reload *
%zone-admin ALL = (knot) NOPASSWD: ZONE_RELOAD