The other thing I'm not quite grasping is the sudoHost option. Can I specify an AD
security group that has computer objects as members here? Or must I list each server
individually and manually update multiple sudo rules each time a server is domain joined?