sudo: allow groups to use sudo without entering password