split sudo and operations groups in sudoers