secure extensible sudo setup for puppet