rules: add "sudo" to the allowed groups for polkit rules