support keyring module for sudo passwords

As discussed in https://github.com/ansible/ansible/issues/2182

I did want to make the key name configurable, which would be easy in argparse, but a hack in optparse, so I left that out.