remove the %sudo group setting, too, just to be sure