the "administrative user group" changed from admin to sudo, so prefer sudo

We want to use the sudo when it exists and admin as a fallback, but when both
exist we should prefer sudo.

*sigh*