Add support for env_keep in the sudoer LWRP

env_keep_add will add things to the env_keep.
env_keep_subtract will remove things from the env_keep.