pwless_sudo.yml now makes {{ user }} a sudoer if s/he isn't already