Change unlocked attribute to include sudo group and root

The sudo group is one of the groups 'administrator' is put into, and root
has no groups but its own. So these additions allow administrator and root
to modify the configuration of the system, along with tech users from the
domain.