What are the risks of passwordless sudo? Is it mainly just if someone has physical access to the machine or if you run a malicious program?