[sudo-discuss] Formalize passpack access