config: add a trigger to chmod /etc/sudoers