do not replace /etc/sudoers, add /etc/sudoers.d/ssh-auth-sock instead