no longer create sudoers group; use 'admin' group instead