opscode sudo cookbook doesn't validate with visudo