controls:
    -   id: SRG-OS-000373-GPOS-00157
        levels:
            - medium
        title: '{{{ full_name }}} must require users to reauthenticate when changing roles.'
        status: automated
        rules:
            - sudo_remove_nopasswd
            - sudo_remove_no_authenticate
