Pretty sure we/I did it this way to keep the usage consistent with how `sudoers_defaults` are currently specified - see `attributes/default.rb` for an example. I think they should both use the same syntax, but I wouldn't make updating the `sudoers_defaults` syntax a requirement for this ticket.

If the syntax or having multiple `Defaults` lines is blocking this pull request and you're happy with the inconsistency then I'll update this PR with the suggested changes.

Thoughts?