Replace support for 'ALL' in the 'Allow running as' sudo column.

This turns out to be useful -- it allows sudoing as service users in
tools, for example.

Bug 68834

Change-Id: Ib2631318c6fe82a51f9349dbbd9b0ca9a49b3054
Create a sudo-as sudoer group for new projects.

Change-Id: Ieb78bc7ede0ebdfe9ead1cc87f41173aee8885a7