(operating-system
  …
  (sudoers-file
   (mixed-text-file "sudoers"
     "@include " %sudoers-specification
     "\nacme ALL = NOPASSWD: " (file-append shepherd "/bin/herd") " restart nginx\n"))
  …)