create a sudoers.d entry for the ssh wrapper
diff --git a/manifests/client.pp b/manifests/client.pp
index 29d9a8c..41545b5 100644
--- a/manifests/client.pp
+++ b/manifests/client.pp
@@ -65,4 +65,13 @@
   Ssh_authorized_key <<| tag == "backuppc_${domain}" |>> {
     require => File["${home_directory}/.ssh"]
   }
+
+  file { '/etc/sudoers.d/backup':
+    ensure  => present,
+    owner   => 'root',
+    group   => 'root',
+    mode    => 440,
+    content => "backup ALL=(ALL:ALL) NOPASSWD: /usr/bin/rsync\n",
+    require => Package['sudo']
+  }
 }
\ No newline at end of file