Sudoers: Allow user aliases in specs