Fixed default permissions for Debian-based distributions.

The code around lines 84 and 91 expects 'specs' to be a list,
but the defaults provide a single string value. This causes
wrong behavior if sudoers:users or sudoers:groups are not
specified in pillar.