Sudo policy for service groups

Change-Id: I0cda7c4f32709c8c7bf6ac38eadd0d1d39b19767
Merge "Sudo policy for service groups"