fix: /etc/sudoers.d/addons is mode 0600, should be 0440