pam.d/sudo handling