Sysadmin fixes

- on PSF box, users in the `admin` group have sudo privileges
- `/etc/sudoers` is automatically regenerated by PSF Chef recipes, so don't alter it