(CommandList
  children: [
    (C {(sed)} {(-r)} {(-i)} {(-e)} 
      {(SQ <"/^Defaults[[:space:]]+env_reset/a Defaults\\texempt_group=sudo">)} {(-e)} {(SQ <"s/^%sudo[[:space:]]+ALL=(ALL:ALL) ALL/%sudo\\tALL=NOPASSWD:ALL/">)} {(/etc/sudoers)}
    )
  ]
)