I do have NOPASSWD set up for sudo. everything seems ok for the relevant trees.
boot-user output from # 66-intree -g
Name : boot-user
Initialized : yes
Enabled : yes
Starts after : root
Current : no
Allowed : root
Symlinks : svc->source db->source
Contents : /
├─(up,Enabled,oneshot) setenv@ orb
├─(1072,Enabled,longrun) svscan@ orb-log
├─(1124,Enabled,longrun) svscan@ orb
├─(up,Enabled,module) scandir@ orb
├─(up,Enabled,oneshot) mount-run@ orb
├─(1077,Enabled,longrun) consolekit-log
├─(1081,Enabled,longrun) consolekit
├─(up,Enabled,module) console-tracker@ consolekit
├─(1075,Enabled,longrun) sddm-log
├─(1085,Enabled,longrun) sddm
├─(up,Enabled,module) display-manager@ sddm
└─(up,Enabled,module) boot-user@ orb
%66-intree -g
Name : graphics
Initialized : yes
Enabled : yes
Starts after : None
Current : yes
Allowed : orb
Symlinks : svc->source db->source
Contents : /
├─(1270,Enabled,longrun) dbus-session@ orb-log
├─(1269,Enabled,longrun) pulseaudio-log
├─(11991,Enabled,longrun) pulseaudio
├─(up,Enabled,oneshot) xdg-user-dirs
└─(1274,Enabled,longrun) dbus-session@ orb