For specific user, refuse sudo immediately, do not ask for password

For a specific user or list of specific users, I want to make it so they are not even asked for a password but just directly refused. Although this is after I’ve allowed them 1 specif command. so the sudoers file would look something like this(example): testuser ALL = (root) NOPASSWD:NOEXEC: /bin/ls, <REFUSE_EVERYTHING_ELSE_WITHOUT_ASKING_FOR_PASSWORD> Is this…