bffh ALL=NOPASSWD: /usr/bin/systemctl start bffh.service
bffh ALL=NOPASSWD: /usr/bin/systemctl stop bffh.service
bffh ALL=NOPASSWD: /usr/bin/systemctl restart bffh.service