top.sls: use sudoers formula