[sudo-users] Conflict while a user is in two groups?

[Todd C. Miller]

In sudo the last matching rule wins.  That means that users in group
wheel will match:

%wheel  ALL=(ALL)       ALL

and must enter a password.  If you swap the order of the rules so
the NOPASSWD one is last it should behave the way you want.

 - todd