Using sudo in script over desktop portal asks for password, even so sudoers config says it should not

I have a script with the following part

/run/wrappers/bin/sudo -En librewolf-airvpn "${1}"

I have configured sudo to not ask for a password here linux/thinkpad/wireguard.nix · master · Florian Engel / nixosconfiguration · GitLab .

Running that script from a terminal works fine. Using it over the desktop portal fails with

Mar 21 11:05:27 nixosThinkpad sudo[27792]:  florian : a password is required ; PWD=/home/florian ; USER=root ; COMMAND=librewolf-airvpn

IIRC sudo uses the full realpath when dealing with symlinks. This makes configuring them with nix involved a pain, and I gave up eventually.