exclude /usr/local/etc/sudoers when we extract ports-overlay
Move /usr/local/etc/sudoers to desktop-overlay, and don't keep re-extracting it during updates