sudoers: also env_keep RBENV_VERSION