We can use oslo privsep package to do a limited set of operations with admin access while not needing general root / sudo access for everything. We have to Move from oslo.rootwrap to oslo.privsep.