implement /etc/sudoers.d-based sudo config