ocg-render-admins should be able to run any command as the ocg user.

That's effectively what they were given in the first place, since you
can give nodejs-ocg a script which forks a bash shell.  Restricting
to nodejs-ocg serves no actual purpose other than making debugging
OCG more difficult.

Change-Id: I9e213b7629e7c9886a2840812ab831340eecbb7c