session: allow session_sudo to search all sudo keyrings