[justincormack]

You do not give the nginx user sudo ability, and any user who has sudo is root, and should be treated as such.