add ntp outlines
use blocks where it is applicable
sudo
    need role template for visudo because it needs to run vi with the calling user subject type
    due to nature of user applications i cannot use blockabstracts in any meaningful way

    the sudo_etc_filetrans_etc_sudo() will cause issues when roles are constrained because
    i suppose /etc/sudoers ends up with sysadm.u:sysadm.r:sudo.etc_object. a role transition may or
    may not be in order here