[SSSD-users] sudorules - allow all and exclude some