A developer needs to run a backup script via sudo that depends on the custom environment variable BACKUP_TARGET set in their shell. When they run 'sudo ./backup.sh', the script fails because BACKUP_TARGET is empty. You confirm the variable is exported in their session. Which approach correctly passes this single variable through sudo without disabling sudo's environment security globally?