A sudo rule appears to allow a maintenance command and still denies execution

The binary path is correct in sudoers, yet the executed process tree passes through env and escapes the exact rule match.