Replace passwordless sudo o user by `sudo` group membership

I'm running this on byzantium since some time since i'm not a fan of root privileges with the only requirement being having a tty.

It would mean scripts either use sudo (when run in shell) or polkit/pkexec when using GUI.

/cc @kyle.rankin