Add support for env_keep in the sudoer template.
env_keep_add will add things to the env_keep.
env_keep_subtract will remove things from the env_keep.