One of the perks of being a network engineer is that since almost all Network troubleshooting utilities (nmap, tshark, hell even tracroute) require root I get sudo on everything. Now sure they could restrict my sudo privileges to specific applications, but at that point, they don't really trust anyone so they have already lost.

Anyway, if you can't trust your employees with sudo, they shouldn't be using the command-line at all.