Harden sudo config to avoid potential future privilege escalation

Originally created by @intrigeri on #15829 (Redmine)

Feature Branch: bugfix/15829-harden-sudo-config+force-all-tests

Edited May 21, 2020 by intrigeri

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information