Defaults:zabbix !requiretty
zabbix ALL=(root) NOPASSWD: /usr/bin/apt list --upgradable, /usr/bin/journalctl -p err -S *