fix sudo stuff for ops/sudoers

allow ops members to sudo for all,
make explicit ownership of /etc/sudoers

Change-Id: I92227c1df2e4295964607e9d78eba40ca16166da