debian/changelog

+librem5-devkit-tools (0.0.20pureos1) byzantium; urgency=high
+
+  * Drop passwordless sudo
+    See: https://source.puri.sm/Librem5/OS-issues/-/issues/208
+
+ -- Guido Günther <agx@sigxcpu.org>  Fri, 27 Aug 2021 16:08:45 +0200
+
 librem5-devkit-tools (0.0.19pureos1) byzantium; urgency=medium
 
   * d/control: Depend on librem5-flash-image

debian/librem5-devkit-base.maintscript

@@ -5,3 +5,4 @@ rm_conffile /etc/kernel/postinst.d/update-Image 0.0.16~ librem5-devkit-base
 rm_conffile /etc/pulse/daemon.conf.d/90-librem5-devkit.conf 0.0.16~  librem5-devkit-base
 rm_conffile /etc/pulse/librem5-devkit.pa 0.0.16~ librem5-devkit-base
 rm_conffile /etc/flash-kernel/ubootenv.d/root 0.0.16~ librem5-devkit-base
+rm_conffile /etc/sudoers.d/devkit 0.0.20~

etc/sudoers.d/devkit

-purism	ALL=NOPASSWD: ALL