Harden sudo config to avoid potential future privilege escalation

Feature Branch: bugfix/15829-harden-sudo-config+force-all-tests

Original created by @intrigeri on 15829 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information