rename to restrict_sudo, pass the option through from the worker.yml config
bump travis-build