ocf_ssh: add makeservices granting sudo

This replaces the setuid makemysql wrapper, which had security bugs due
to not resetting the environment (rt#3101).

Using sudo is almost certainly better than writing our own wrapper.