Base template now sets up passwordless sudo for 'glass' user.