A sudo automation works for one command but fails for the next

A hardening rollout lands and only unattended maintenance scripts begin failing while operators can still sudo interactively.