add trigger to ensure includedir sudoers.d (added in d110a738) is in config
actually, run the trigger now