allow empty referrer and foobars at sudo