Last modified: 2014-02-12 23:39:51 UTC
At the moment we keep service users pinned to their particular chmod sudo rules but don't allow them to be added or removed elsewhere.
um... as of https://gerrit.wikimedia.org/r/#/c/56523/ that is