sudo: include sudo role from ansible-galaxy, updatefor sudo_groups
sudo_groups: define defaults for all hosts
move all users_extras into users.yml, clean up
users: get rid of sudo task, we now have a role
update playbooks for sudo