Sudo requests should directly be flagged as APPROVED_ADMIN