%wheel ALL=(ALL) NOPASSWD:/usr/bin/firewall-cmd --state
%wheel@implicit_files ALL=(ALL) NOPASSWD:/usr/bin/firewall-cmd --state