Revoke sudo from most jobs

Revoke sudo from all jobs that do or could run on bare-precise nodes.
Do not revoke it from devstack-precise or special nodes.

Change-Id: Icaf0bb5d15b76f985d0d8c0ec4afa6a34568570a
Merge "Revoke sudo from most jobs"