controls:
    -   id: SRG-OS-000373-GPOS-00158
        levels:
            - medium
        title: "{{{ full_name }}} must require users to reauthenticate when
                    changing authenticators."
        status: automated
        rules:
            - disallow_bypass_password_sudo
            - sudo_remove_nopasswd
            - sudo_remove_no_authenticate
