NoteOnSudo
From RdiffBackupWiki
I followed the unattended guide but further restricted things by creating a backup user on the target (client) server and adding a sudo rule:
visudo and add this line, where backupclient represents the user account:
backupclient ALL=NOPASSWD: /usr/bin/rdiff-backup
Then instead of placing the authorized key file in root place it under the 'backupclient' account and add 'sudo' to the command:
command="sudo rdiff-backup......."
