diff --git a/plugins/sudoers/po/sudoers.pot b/plugins/sudoers/po/sudoers.pot
index 02631f000..d95261a55 100644
--- a/plugins/sudoers/po/sudoers.pot
+++ b/plugins/sudoers/po/sudoers.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.14\n"
+"Project-Id-Version: sudo 1.9.15\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2023-06-07 13:27-0600\n"
+"POT-Creation-Date: 2023-10-19 10:02-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
 
-#: confstr.sh:1 gram.y:1240 plugins/sudoers/logging.c:885
+#: confstr.sh:1 gram.y:1257 plugins/sudoers/logging.c:911
 msgid "syntax error"
 msgstr ""
 
@@ -41,33 +41,34 @@ msgstr ""
 msgid "Sorry, try again."
 msgstr ""
 
-#: gram.y:236 gram.y:303 gram.y:312 gram.y:321 gram.y:331 gram.y:341 gram.y:365
-#: gram.y:392 gram.y:401 gram.y:409 gram.y:418 gram.y:427 gram.y:501 gram.y:511
-#: gram.y:523 gram.y:571 gram.y:580 gram.y:589 gram.y:598 gram.y:730 gram.y:738
-#: gram.y:749 gram.y:761 gram.y:780 gram.y:943 gram.y:948 gram.y:956 gram.y:970
-#: gram.y:976 gram.y:988 gram.y:994 gram.y:1119 gram.y:1128 gram.y:1136
-#: gram.y:1145 gram.y:1154 gram.y:1183 gram.y:1192 gram.y:1200 gram.y:1300
-#: gram.y:1430 gram.y:1808 gram.y:1819 gram.y:1901 lib/eventlog/eventlog.c:236
-#: lib/eventlog/eventlog.c:313 lib/eventlog/eventlog.c:755
-#: lib/eventlog/eventlog.c:832 lib/eventlog/eventlog.c:1133
-#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:472
-#: lib/eventlog/parse_json.c:502 lib/iolog/iolog_filter.c:142
+#: gram.y:238 gram.y:305 gram.y:314 gram.y:323 gram.y:333 gram.y:343 gram.y:367
+#: gram.y:394 gram.y:403 gram.y:411 gram.y:420 gram.y:429 gram.y:503 gram.y:513
+#: gram.y:525 gram.y:573 gram.y:582 gram.y:591 gram.y:600 gram.y:733 gram.y:742
+#: gram.y:757 gram.y:777 gram.y:796 gram.y:959 gram.y:964 gram.y:972 gram.y:986
+#: gram.y:992 gram.y:1004 gram.y:1010 gram.y:1135 gram.y:1144 gram.y:1152
+#: gram.y:1161 gram.y:1170 gram.y:1199 gram.y:1208 gram.y:1216 gram.y:1317
+#: gram.y:1447 gram.y:1829 gram.y:1840 gram.y:1922 lib/eventlog/eventlog.c:236
+#: lib/eventlog/eventlog.c:313 lib/eventlog/eventlog.c:765
+#: lib/eventlog/eventlog.c:842 lib/eventlog/eventlog.c:1175
+#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:484
+#: lib/eventlog/parse_json.c:514 lib/iolog/iolog_filter.c:142
 #: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:233
-#: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
-#: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
-#: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
+#: lib/iolog/iolog_legacy.c:101 lib/iolog/iolog_legacy.c:112
+#: lib/iolog/iolog_legacy.c:124 lib/iolog/iolog_legacy.c:134
+#: lib/iolog/iolog_legacy.c:140 lib/iolog/iolog_loginfo.c:76
 #: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
 #: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
-#: logsrvd/iolog_writer.c:182 logsrvd/iolog_writer.c:215
-#: logsrvd/iolog_writer.c:225 logsrvd/iolog_writer.c:254
-#: logsrvd/iolog_writer.c:275 logsrvd/iolog_writer.c:287
-#: logsrvd/iolog_writer.c:297 logsrvd/iolog_writer.c:307
-#: logsrvd/iolog_writer.c:317 logsrvd/iolog_writer.c:329
-#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
+#: logsrvd/iolog_writer.c:147 logsrvd/iolog_writer.c:185
+#: logsrvd/iolog_writer.c:218 logsrvd/iolog_writer.c:228
+#: logsrvd/iolog_writer.c:257 logsrvd/iolog_writer.c:278
+#: logsrvd/iolog_writer.c:290 logsrvd/iolog_writer.c:300
+#: logsrvd/iolog_writer.c:310 logsrvd/iolog_writer.c:320
+#: logsrvd/iolog_writer.c:330 logsrvd/iolog_writer.c:342
 #: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
-#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
-#: logsrvd/logsrvd.c:1058 logsrvd/logsrvd.c:1121 logsrvd/logsrvd.c:1590
-#: logsrvd/logsrvd.c:1595 logsrvd/logsrvd.c:1782 logsrvd/logsrvd.c:1999
+#: logsrvd/iolog_writer.c:390 logsrvd/iolog_writer.c:396
+#: logsrvd/iolog_writer.c:580 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
+#: logsrvd/logsrvd.c:1057 logsrvd/logsrvd.c:1120 logsrvd/logsrvd.c:1589
+#: logsrvd/logsrvd.c:1594 logsrvd/logsrvd.c:1781 logsrvd/logsrvd.c:2003
 #: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
@@ -81,39 +82,40 @@ msgstr ""
 #: logsrvd/logsrvd_conf.c:1633 logsrvd/logsrvd_conf.c:1640
 #: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1743
 #: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:216
-#: logsrvd/logsrvd_journal.c:217 logsrvd/logsrvd_journal.c:273
-#: logsrvd/logsrvd_journal.c:278 logsrvd/logsrvd_journal.c:438
-#: logsrvd/logsrvd_journal.c:440 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_journal.c:217 logsrvd/logsrvd_journal.c:274
+#: logsrvd/logsrvd_journal.c:279 logsrvd/logsrvd_journal.c:439
+#: logsrvd/logsrvd_journal.c:441 logsrvd/logsrvd_local.c:215
 #: logsrvd/logsrvd_local.c:216 logsrvd/logsrvd_local.c:278
 #: logsrvd/logsrvd_local.c:279 logsrvd/logsrvd_local.c:417
-#: logsrvd/logsrvd_local.c:466 logsrvd/logsrvd_local.c:467
-#: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:473
+#: logsrvd/logsrvd_local.c:468 logsrvd/logsrvd_local.c:469
+#: logsrvd/logsrvd_local.c:474 logsrvd/logsrvd_local.c:475
 #: logsrvd/logsrvd_queue.c:159 logsrvd/logsrvd_queue.c:189
 #: logsrvd/logsrvd_queue.c:266 logsrvd/logsrvd_relay.c:446
-#: logsrvd/logsrvd_relay.c:745 logsrvd/logsrvd_relay.c:852
-#: logsrvd/sendlog.c:251 logsrvd/sendlog.c:260 logsrvd/sendlog.c:292
-#: logsrvd/sendlog.c:298 logsrvd/sendlog.c:347 logsrvd/sendlog.c:624
-#: logsrvd/sendlog.c:1810 plugins/sudoers/audit.c:116
-#: plugins/sudoers/auth/bsdauth.c:152 plugins/sudoers/auth/kerb5.c:121
-#: plugins/sudoers/auth/kerb5.c:148 plugins/sudoers/auth/pam.c:687
-#: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/auth/sia.c:59
-#: plugins/sudoers/canon_path.c:129 plugins/sudoers/canon_path.c:160
-#: plugins/sudoers/check_aliases.c:168 plugins/sudoers/cvtsudoers.c:132
+#: logsrvd/logsrvd_relay.c:748 logsrvd/logsrvd_relay.c:855
+#: logsrvd/sendlog.c:256 logsrvd/sendlog.c:265 logsrvd/sendlog.c:297
+#: logsrvd/sendlog.c:303 logsrvd/sendlog.c:352 logsrvd/sendlog.c:630
+#: logsrvd/sendlog.c:1822 plugins/sudoers/audit.c:118
+#: plugins/sudoers/auth/bsdauth.c:154 plugins/sudoers/auth/kerb5.c:122
+#: plugins/sudoers/auth/kerb5.c:150 plugins/sudoers/auth/pam.c:697
+#: plugins/sudoers/auth/rfc1938.c:112 plugins/sudoers/auth/sia.c:61
+#: plugins/sudoers/canon_path.c:129 plugins/sudoers/canon_path.c:161
+#: plugins/sudoers/check_aliases.c:128 plugins/sudoers/check_util.c:56
+#: plugins/sudoers/check_util.c:84 plugins/sudoers/cvtsudoers.c:132
 #: plugins/sudoers/cvtsudoers.c:176 plugins/sudoers/cvtsudoers.c:193
-#: plugins/sudoers/cvtsudoers.c:204 plugins/sudoers/cvtsudoers.c:334
-#: plugins/sudoers/cvtsudoers.c:373 plugins/sudoers/cvtsudoers.c:393
-#: plugins/sudoers/cvtsudoers.c:538 plugins/sudoers/cvtsudoers.c:691
-#: plugins/sudoers/cvtsudoers.c:709 plugins/sudoers/cvtsudoers.c:883
-#: plugins/sudoers/cvtsudoers.c:891 plugins/sudoers/cvtsudoers.c:1386
-#: plugins/sudoers/cvtsudoers.c:1390 plugins/sudoers/cvtsudoers.c:1492
+#: plugins/sudoers/cvtsudoers.c:204 plugins/sudoers/cvtsudoers.c:338
+#: plugins/sudoers/cvtsudoers.c:379 plugins/sudoers/cvtsudoers.c:399
+#: plugins/sudoers/cvtsudoers.c:545 plugins/sudoers/cvtsudoers.c:698
+#: plugins/sudoers/cvtsudoers.c:716 plugins/sudoers/cvtsudoers.c:891
+#: plugins/sudoers/cvtsudoers.c:899 plugins/sudoers/cvtsudoers.c:1395
+#: plugins/sudoers/cvtsudoers.c:1399 plugins/sudoers/cvtsudoers.c:1501
 #: plugins/sudoers/cvtsudoers_csv.c:183 plugins/sudoers/cvtsudoers_csv.c:247
-#: plugins/sudoers/cvtsudoers_json.c:76 plugins/sudoers/cvtsudoers_ldif.c:151
-#: plugins/sudoers/cvtsudoers_ldif.c:194 plugins/sudoers/cvtsudoers_ldif.c:235
-#: plugins/sudoers/cvtsudoers_ldif.c:300 plugins/sudoers/cvtsudoers_ldif.c:376
-#: plugins/sudoers/cvtsudoers_ldif.c:430 plugins/sudoers/cvtsudoers_ldif.c:438
-#: plugins/sudoers/cvtsudoers_ldif.c:449 plugins/sudoers/cvtsudoers_ldif.c:456
-#: plugins/sudoers/cvtsudoers_ldif.c:468 plugins/sudoers/cvtsudoers_ldif.c:481
-#: plugins/sudoers/cvtsudoers_ldif.c:489 plugins/sudoers/cvtsudoers_ldif.c:636
+#: plugins/sudoers/cvtsudoers_json.c:76 plugins/sudoers/cvtsudoers_ldif.c:152
+#: plugins/sudoers/cvtsudoers_ldif.c:195 plugins/sudoers/cvtsudoers_ldif.c:236
+#: plugins/sudoers/cvtsudoers_ldif.c:302 plugins/sudoers/cvtsudoers_ldif.c:378
+#: plugins/sudoers/cvtsudoers_ldif.c:432 plugins/sudoers/cvtsudoers_ldif.c:440
+#: plugins/sudoers/cvtsudoers_ldif.c:451 plugins/sudoers/cvtsudoers_ldif.c:458
+#: plugins/sudoers/cvtsudoers_ldif.c:470 plugins/sudoers/cvtsudoers_ldif.c:483
+#: plugins/sudoers/cvtsudoers_ldif.c:491 plugins/sudoers/cvtsudoers_ldif.c:638
 #: plugins/sudoers/cvtsudoers_merge.c:47 plugins/sudoers/cvtsudoers_merge.c:52
 #: plugins/sudoers/cvtsudoers_merge.c:353
 #: plugins/sudoers/cvtsudoers_merge.c:399
@@ -123,173 +125,173 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:564
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1158
-#: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
-#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:197
+#: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:455
+#: plugins/sudoers/defaults.c:689 plugins/sudoers/defaults.c:1051
+#: plugins/sudoers/defaults.c:1235 plugins/sudoers/editor.c:198
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
-#: plugins/sudoers/filedigest.c:55 plugins/sudoers/filedigest.c:71
+#: plugins/sudoers/filedigest.c:66 plugins/sudoers/filedigest.c:70
 #: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:212
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
-#: plugins/sudoers/iolog.c:667 plugins/sudoers/iolog.c:693
-#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:447
-#: plugins/sudoers/ldap.c:622 plugins/sudoers/ldap.c:786
-#: plugins/sudoers/ldap.c:1210 plugins/sudoers/ldap.c:1636
-#: plugins/sudoers/ldap.c:1673 plugins/sudoers/ldap.c:1888
-#: plugins/sudoers/ldap.c:1997 plugins/sudoers/ldap.c:2013
+#: plugins/sudoers/iolog.c:675 plugins/sudoers/iolog.c:703
+#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:448
+#: plugins/sudoers/ldap.c:625 plugins/sudoers/ldap.c:789
+#: plugins/sudoers/ldap.c:1214 plugins/sudoers/ldap.c:1642
+#: plugins/sudoers/ldap.c:1679 plugins/sudoers/ldap.c:1897
+#: plugins/sudoers/ldap.c:2007 plugins/sudoers/ldap.c:2023
 #: plugins/sudoers/ldap_conf.c:215 plugins/sudoers/ldap_conf.c:247
 #: plugins/sudoers/ldap_conf.c:299 plugins/sudoers/ldap_conf.c:335
 #: plugins/sudoers/ldap_conf.c:441 plugins/sudoers/ldap_conf.c:456
-#: plugins/sudoers/ldap_conf.c:562 plugins/sudoers/ldap_conf.c:595
-#: plugins/sudoers/ldap_conf.c:691 plugins/sudoers/ldap_conf.c:773
+#: plugins/sudoers/ldap_conf.c:565 plugins/sudoers/ldap_conf.c:598
+#: plugins/sudoers/ldap_conf.c:694 plugins/sudoers/ldap_conf.c:776
 #: plugins/sudoers/ldap_util.c:294 plugins/sudoers/ldap_util.c:301
 #: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
 #: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:402
 #: plugins/sudoers/log_client.c:717 plugins/sudoers/log_client.c:739
-#: plugins/sudoers/log_client.c:744 plugins/sudoers/log_client.c:1423
-#: plugins/sudoers/log_client.c:1544 plugins/sudoers/log_client.c:1667
-#: plugins/sudoers/log_client.c:1986 plugins/sudoers/log_client.c:2045
-#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:189
-#: plugins/sudoers/logging.c:457 plugins/sudoers/logging.c:690
-#: plugins/sudoers/logging.c:846 plugins/sudoers/match_command.c:295
-#: plugins/sudoers/match_command.c:563 plugins/sudoers/match_command.c:629
-#: plugins/sudoers/match_command.c:724 plugins/sudoers/match_command.c:770
-#: plugins/sudoers/match_digest.c:82 plugins/sudoers/parse.c:279
-#: plugins/sudoers/parse.c:296 plugins/sudoers/parse.c:315
-#: plugins/sudoers/parse.c:334 plugins/sudoers/parse.c:351
-#: plugins/sudoers/parse.c:374 plugins/sudoers/parse.c:385
+#: plugins/sudoers/log_client.c:744 plugins/sudoers/log_client.c:1426
+#: plugins/sudoers/log_client.c:1547 plugins/sudoers/log_client.c:1670
+#: plugins/sudoers/log_client.c:1993 plugins/sudoers/log_client.c:2052
+#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:190
+#: plugins/sudoers/logging.c:475 plugins/sudoers/logging.c:711
+#: plugins/sudoers/logging.c:872 plugins/sudoers/lookup.c:338
+#: plugins/sudoers/lookup.c:355 plugins/sudoers/lookup.c:374
+#: plugins/sudoers/lookup.c:393 plugins/sudoers/lookup.c:410
+#: plugins/sudoers/lookup.c:433 plugins/sudoers/lookup.c:444
+#: plugins/sudoers/match_command.c:302 plugins/sudoers/match_command.c:574
+#: plugins/sudoers/match_command.c:641 plugins/sudoers/match_command.c:737
+#: plugins/sudoers/match_command.c:785 plugins/sudoers/match_digest.c:88
 #: plugins/sudoers/parse_ldif.c:153 plugins/sudoers/parse_ldif.c:184
 #: plugins/sudoers/parse_ldif.c:253 plugins/sudoers/parse_ldif.c:261
 #: plugins/sudoers/parse_ldif.c:266 plugins/sudoers/parse_ldif.c:342
 #: plugins/sudoers/parse_ldif.c:353 plugins/sudoers/parse_ldif.c:380
 #: plugins/sudoers/parse_ldif.c:397 plugins/sudoers/parse_ldif.c:409
 #: plugins/sudoers/parse_ldif.c:413 plugins/sudoers/parse_ldif.c:427
-#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
-#: plugins/sudoers/parse_ldif.c:628 plugins/sudoers/parse_ldif.c:653
-#: plugins/sudoers/parse_ldif.c:711 plugins/sudoers/parse_ldif.c:728
-#: plugins/sudoers/parse_ldif.c:756 plugins/sudoers/parse_ldif.c:763
-#: plugins/sudoers/policy.c:622 plugins/sudoers/policy.c:1050
-#: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
-#: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
-#: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
-#: plugins/sudoers/pwutil.c:659 plugins/sudoers/pwutil.c:857
-#: plugins/sudoers/pwutil.c:945 plugins/sudoers/pwutil.c:993
-#: plugins/sudoers/pwutil.c:1052 plugins/sudoers/sssd.c:145
-#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
-#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
-#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:762
-#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:126
-#: plugins/sudoers/stubs.c:134 plugins/sudoers/sudoers.c:352
-#: plugins/sudoers/sudoers.c:378 plugins/sudoers/sudoers.c:441
-#: plugins/sudoers/sudoers.c:673 plugins/sudoers/sudoers.c:683
-#: plugins/sudoers/sudoers.c:824 plugins/sudoers/sudoers.c:890
-#: plugins/sudoers/sudoers.c:946 plugins/sudoers/sudoers.c:998
-#: plugins/sudoers/sudoers.c:1174 plugins/sudoers/sudoers.c:1241
-#: plugins/sudoers/sudoers.c:1325 plugins/sudoers/sudoers.c:1513
+#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:595
+#: plugins/sudoers/parse_ldif.c:625 plugins/sudoers/parse_ldif.c:650
+#: plugins/sudoers/parse_ldif.c:708 plugins/sudoers/parse_ldif.c:725
+#: plugins/sudoers/parse_ldif.c:753 plugins/sudoers/parse_ldif.c:760
+#: plugins/sudoers/policy.c:646 plugins/sudoers/policy.c:1061
+#: plugins/sudoers/prompt.c:94 plugins/sudoers/pwutil.c:219
+#: plugins/sudoers/pwutil.c:290 plugins/sudoers/pwutil.c:368
+#: plugins/sudoers/pwutil.c:542 plugins/sudoers/pwutil.c:607
+#: plugins/sudoers/pwutil.c:679 plugins/sudoers/pwutil.c:877
+#: plugins/sudoers/pwutil.c:967 plugins/sudoers/pwutil.c:1015
+#: plugins/sudoers/pwutil.c:1076 plugins/sudoers/sethost.c:85
+#: plugins/sudoers/sssd.c:145 plugins/sudoers/sssd.c:186
+#: plugins/sudoers/sssd.c:415 plugins/sudoers/sssd.c:480
+#: plugins/sudoers/sssd.c:507 plugins/sudoers/sssd.c:570
+#: plugins/sudoers/sssd.c:765 plugins/sudoers/strvec_join.c:53
+#: plugins/sudoers/sudoers.c:405 plugins/sudoers/sudoers.c:412
+#: plugins/sudoers/sudoers.c:656 plugins/sudoers/sudoers.c:666
+#: plugins/sudoers/sudoers.c:811 plugins/sudoers/sudoers.c:877
+#: plugins/sudoers/sudoers.c:936 plugins/sudoers/sudoers.c:985
+#: plugins/sudoers/sudoers.c:1144 plugins/sudoers/sudoers.c:1213
+#: plugins/sudoers/sudoers.c:1307 plugins/sudoers/sudoers_cb.c:150
 #: plugins/sudoers/sudoreplay.c:559 plugins/sudoers/sudoreplay.c:562
-#: plugins/sudoers/sudoreplay.c:1278 plugins/sudoers/sudoreplay.c:1334
-#: plugins/sudoers/sudoreplay.c:1530 plugins/sudoers/sudoreplay.c:1534
-#: plugins/sudoers/testsudoers.c:123 plugins/sudoers/testsudoers.c:220
-#: plugins/sudoers/testsudoers.c:233 plugins/sudoers/testsudoers.c:250
-#: plugins/sudoers/testsudoers.c:617 plugins/sudoers/timestamp.c:476
-#: plugins/sudoers/timestamp.c:520 plugins/sudoers/timestamp.c:1042
-#: plugins/sudoers/timestamp.c:1171 plugins/sudoers/toke_util.c:78
-#: plugins/sudoers/toke_util.c:106 plugins/sudoers/toke_util.c:131
-#: plugins/sudoers/toke_util.c:161 plugins/sudoers/toke_util.c:200
-#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:154
-#: plugins/sudoers/visudo.c:263 plugins/sudoers/visudo.c:388
-#: plugins/sudoers/visudo.c:394 plugins/sudoers/visudo.c:505
-#: plugins/sudoers/visudo.c:1065 plugins/sudoers/visudo.c:1087
-#: plugins/sudoers/visudo.c:1180 toke.l:1032 toke.l:1195 toke.l:1223
-#: toke.l:1299
+#: plugins/sudoers/sudoreplay.c:1279 plugins/sudoers/sudoreplay.c:1335
+#: plugins/sudoers/sudoreplay.c:1531 plugins/sudoers/sudoreplay.c:1535
+#: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:256
+#: plugins/sudoers/testsudoers.c:265 plugins/sudoers/testsudoers.c:275
+#: plugins/sudoers/testsudoers.c:282 plugins/sudoers/testsudoers.c:302
+#: plugins/sudoers/testsudoers.c:758 plugins/sudoers/timestamp.c:469
+#: plugins/sudoers/timestamp.c:513 plugins/sudoers/timestamp.c:1042
+#: plugins/sudoers/timestamp.c:1216 plugins/sudoers/toke_util.c:79
+#: plugins/sudoers/toke_util.c:108 plugins/sudoers/toke_util.c:134
+#: plugins/sudoers/toke_util.c:164 plugins/sudoers/toke_util.c:204
+#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:151
+#: plugins/sudoers/visudo.c:258 plugins/sudoers/visudo.c:383
+#: plugins/sudoers/visudo.c:389 plugins/sudoers/visudo.c:501
+#: plugins/sudoers/visudo.c:1073 plugins/sudoers/visudo.c:1095
+#: plugins/sudoers/visudo.c:1189 toke.l:1031 toke.l:1194 toke.l:1213
+#: toke.l:1240 toke.l:1320
 msgid "unable to allocate memory"
 msgstr ""
 
-#: gram.y:622
+#: gram.y:624
 msgid "a digest requires a path name"
 msgstr ""
 
-#: gram.y:644
+#: gram.y:646
 msgid "values for \"CWD\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:650
+#: gram.y:652
 msgid "\"CWD\" path too long"
 msgstr ""
 
-#: gram.y:660
+#: gram.y:662
 msgid "values for \"CHROOT\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:666
+#: gram.y:668
 msgid "\"CHROOT\" path too long"
 msgstr ""
 
-#: gram.y:801
+#: gram.y:817
 #, c-format
 msgid "syntax error, reserved word %s used as an alias name"
 msgstr ""
 
-#: gram.y:824
+#: gram.y:840
 msgid "invalid notbefore value"
 msgstr ""
 
-#: gram.y:833
+#: gram.y:849
 msgid "invalid notafter value"
 msgstr ""
 
-#: gram.y:843 plugins/sudoers/policy.c:381
+#: gram.y:859 plugins/sudoers/policy.c:390
 msgid "timeout value too large"
 msgstr ""
 
-#: gram.y:845 plugins/sudoers/policy.c:383
+#: gram.y:861 plugins/sudoers/policy.c:392
 msgid "invalid timeout value"
 msgstr ""
 
-#: gram.y:966 plugins/sudoers/sudoers.c:1192
+#: gram.y:982 plugins/sudoers/sudoers.c:1162
 msgid "command too long"
 msgstr ""
 
-#: gram.y:1000
+#: gram.y:1016
 msgid "expected a fully-qualified path name"
 msgstr ""
 
-#: gram.y:1244 plugins/sudoers/check_aliases.c:96
-#: plugins/sudoers/defaults.c:1275
+#: gram.y:1261
 #, c-format
-msgid "%s:%d:%d: %s\n"
+msgid "%s:%d:%zu: %s\n"
 msgstr ""
 
-#: gram.y:1298
+#: gram.y:1315
 #, c-format
 msgid "Alias \"%s\" already defined"
 msgstr ""
 
-#: gram.y:1808 gram.y:1819 gram.y:1901 lib/eventlog/eventlog.c:236
-#: lib/eventlog/eventlog.c:755 lib/eventlog/eventlog.c:828
-#: lib/eventlog/eventlog.c:831 lib/eventlog/eventlog.c:1133
-#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:471
-#: lib/eventlog/parse_json.c:502 lib/iolog/iolog_filter.c:142
+#: gram.y:1829 gram.y:1840 gram.y:1922 lib/eventlog/eventlog.c:236
+#: lib/eventlog/eventlog.c:765 lib/eventlog/eventlog.c:838
+#: lib/eventlog/eventlog.c:841 lib/eventlog/eventlog.c:1175
+#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:483
+#: lib/eventlog/parse_json.c:514 lib/iolog/iolog_filter.c:142
 #: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:232
-#: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
-#: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
-#: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
+#: lib/iolog/iolog_legacy.c:101 lib/iolog/iolog_legacy.c:112
+#: lib/iolog/iolog_legacy.c:124 lib/iolog/iolog_legacy.c:134
+#: lib/iolog/iolog_legacy.c:140 lib/iolog/iolog_loginfo.c:76
 #: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
 #: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
-#: logsrvd/iolog_writer.c:171 logsrvd/iolog_writer.c:181
-#: logsrvd/iolog_writer.c:194 logsrvd/iolog_writer.c:214
-#: logsrvd/iolog_writer.c:224 logsrvd/iolog_writer.c:243
-#: logsrvd/iolog_writer.c:253 logsrvd/iolog_writer.c:264
-#: logsrvd/iolog_writer.c:274 logsrvd/iolog_writer.c:286
-#: logsrvd/iolog_writer.c:296 logsrvd/iolog_writer.c:306
-#: logsrvd/iolog_writer.c:316 logsrvd/iolog_writer.c:328
-#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
+#: logsrvd/iolog_writer.c:147 logsrvd/iolog_writer.c:174
+#: logsrvd/iolog_writer.c:184 logsrvd/iolog_writer.c:197
+#: logsrvd/iolog_writer.c:217 logsrvd/iolog_writer.c:227
+#: logsrvd/iolog_writer.c:246 logsrvd/iolog_writer.c:256
+#: logsrvd/iolog_writer.c:267 logsrvd/iolog_writer.c:277
+#: logsrvd/iolog_writer.c:289 logsrvd/iolog_writer.c:299
+#: logsrvd/iolog_writer.c:309 logsrvd/iolog_writer.c:319
+#: logsrvd/iolog_writer.c:329 logsrvd/iolog_writer.c:341
 #: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
-#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
+#: logsrvd/iolog_writer.c:390 logsrvd/iolog_writer.c:396
+#: logsrvd/iolog_writer.c:580 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
 #: logsrvd/logsrvd.c:461 logsrvd/logsrvd.c:498 logsrvd/logsrvd.c:530
 #: logsrvd/logsrvd.c:584 logsrvd/logsrvd.c:619 logsrvd/logsrvd.c:668
-#: logsrvd/logsrvd.c:704 logsrvd/logsrvd.c:740 logsrvd/logsrvd.c:1132
-#: logsrvd/logsrvd.c:1447 logsrvd/logsrvd.c:1454 logsrvd/logsrvd.c:1590
-#: logsrvd/logsrvd.c:1595 logsrvd/logsrvd.c:1782 logsrvd/logsrvd.c:1999
+#: logsrvd/logsrvd.c:704 logsrvd/logsrvd.c:740 logsrvd/logsrvd.c:1131
+#: logsrvd/logsrvd.c:1446 logsrvd/logsrvd.c:1453 logsrvd/logsrvd.c:1589
+#: logsrvd/logsrvd.c:1594 logsrvd/logsrvd.c:1781 logsrvd/logsrvd.c:2003
 #: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
@@ -305,34 +307,35 @@ msgstr ""
 #: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:125
 #: logsrvd/logsrvd_journal.c:216 logsrvd/logsrvd_journal.c:246
 #: logsrvd/logsrvd_journal.c:250 logsrvd/logsrvd_journal.c:258
-#: logsrvd/logsrvd_journal.c:286 logsrvd/logsrvd_journal.c:290
-#: logsrvd/logsrvd_journal.c:438 logsrvd/logsrvd_local.c:215
-#: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:466
-#: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:491
+#: logsrvd/logsrvd_journal.c:287 logsrvd/logsrvd_journal.c:291
+#: logsrvd/logsrvd_journal.c:439 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:468
+#: logsrvd/logsrvd_local.c:474 logsrvd/logsrvd_local.c:493
 #: logsrvd/logsrvd_queue.c:158 logsrvd/logsrvd_queue.c:189
-#: logsrvd/logsrvd_queue.c:266 logsrvd/sendlog.c:251 logsrvd/sendlog.c:260
-#: logsrvd/sendlog.c:292 logsrvd/sendlog.c:298 logsrvd/sendlog.c:347
-#: logsrvd/sendlog.c:624 logsrvd/sendlog.c:1512 logsrvd/sendlog.c:1519
-#: logsrvd/sendlog.c:1742 logsrvd/sendlog.c:1810 logsrvd/tls_init.c:305
-#: logsrvd/tls_init.c:329 logsrvd/tls_init.c:340 plugins/sudoers/audit.c:116
-#: plugins/sudoers/auth/pam.c:502 plugins/sudoers/auth/pam.c:687
-#: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/canon_path.c:129
-#: plugins/sudoers/canon_path.c:160 plugins/sudoers/check_aliases.c:168
+#: logsrvd/logsrvd_queue.c:266 logsrvd/sendlog.c:256 logsrvd/sendlog.c:265
+#: logsrvd/sendlog.c:297 logsrvd/sendlog.c:303 logsrvd/sendlog.c:352
+#: logsrvd/sendlog.c:630 logsrvd/sendlog.c:1523 logsrvd/sendlog.c:1530
+#: logsrvd/sendlog.c:1753 logsrvd/sendlog.c:1822 logsrvd/tls_init.c:305
+#: logsrvd/tls_init.c:329 logsrvd/tls_init.c:340 plugins/sudoers/audit.c:118
+#: plugins/sudoers/auth/pam.c:518 plugins/sudoers/auth/pam.c:697
+#: plugins/sudoers/auth/rfc1938.c:112 plugins/sudoers/canon_path.c:129
+#: plugins/sudoers/canon_path.c:161 plugins/sudoers/check_aliases.c:128
+#: plugins/sudoers/check_util.c:56 plugins/sudoers/check_util.c:84
 #: plugins/sudoers/cvtsudoers.c:132 plugins/sudoers/cvtsudoers.c:175
 #: plugins/sudoers/cvtsudoers.c:192 plugins/sudoers/cvtsudoers.c:203
-#: plugins/sudoers/cvtsudoers.c:333 plugins/sudoers/cvtsudoers.c:537
-#: plugins/sudoers/cvtsudoers.c:690 plugins/sudoers/cvtsudoers.c:708
-#: plugins/sudoers/cvtsudoers.c:883 plugins/sudoers/cvtsudoers.c:890
-#: plugins/sudoers/cvtsudoers.c:1386 plugins/sudoers/cvtsudoers.c:1390
-#: plugins/sudoers/cvtsudoers.c:1492 plugins/sudoers/cvtsudoers_csv.c:182
+#: plugins/sudoers/cvtsudoers.c:337 plugins/sudoers/cvtsudoers.c:544
+#: plugins/sudoers/cvtsudoers.c:697 plugins/sudoers/cvtsudoers.c:715
+#: plugins/sudoers/cvtsudoers.c:891 plugins/sudoers/cvtsudoers.c:898
+#: plugins/sudoers/cvtsudoers.c:1395 plugins/sudoers/cvtsudoers.c:1399
+#: plugins/sudoers/cvtsudoers.c:1501 plugins/sudoers/cvtsudoers_csv.c:182
 #: plugins/sudoers/cvtsudoers_csv.c:246 plugins/sudoers/cvtsudoers_json.c:75
-#: plugins/sudoers/cvtsudoers_ldif.c:150 plugins/sudoers/cvtsudoers_ldif.c:193
-#: plugins/sudoers/cvtsudoers_ldif.c:234 plugins/sudoers/cvtsudoers_ldif.c:299
-#: plugins/sudoers/cvtsudoers_ldif.c:375 plugins/sudoers/cvtsudoers_ldif.c:429
-#: plugins/sudoers/cvtsudoers_ldif.c:437 plugins/sudoers/cvtsudoers_ldif.c:448
-#: plugins/sudoers/cvtsudoers_ldif.c:455 plugins/sudoers/cvtsudoers_ldif.c:467
-#: plugins/sudoers/cvtsudoers_ldif.c:480 plugins/sudoers/cvtsudoers_ldif.c:488
-#: plugins/sudoers/cvtsudoers_ldif.c:635 plugins/sudoers/cvtsudoers_merge.c:47
+#: plugins/sudoers/cvtsudoers_ldif.c:151 plugins/sudoers/cvtsudoers_ldif.c:194
+#: plugins/sudoers/cvtsudoers_ldif.c:235 plugins/sudoers/cvtsudoers_ldif.c:301
+#: plugins/sudoers/cvtsudoers_ldif.c:377 plugins/sudoers/cvtsudoers_ldif.c:431
+#: plugins/sudoers/cvtsudoers_ldif.c:439 plugins/sudoers/cvtsudoers_ldif.c:450
+#: plugins/sudoers/cvtsudoers_ldif.c:457 plugins/sudoers/cvtsudoers_ldif.c:469
+#: plugins/sudoers/cvtsudoers_ldif.c:482 plugins/sudoers/cvtsudoers_ldif.c:490
+#: plugins/sudoers/cvtsudoers_ldif.c:637 plugins/sudoers/cvtsudoers_merge.c:47
 #: plugins/sudoers/cvtsudoers_merge.c:51 plugins/sudoers/cvtsudoers_merge.c:353
 #: plugins/sudoers/cvtsudoers_merge.c:399
 #: plugins/sudoers/cvtsudoers_merge.c:445
@@ -343,97 +346,99 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:630
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1157
-#: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
-#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:197
+#: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:455
+#: plugins/sudoers/defaults.c:689 plugins/sudoers/defaults.c:1051
+#: plugins/sudoers/defaults.c:1235 plugins/sudoers/editor.c:198
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
-#: plugins/sudoers/filedigest.c:55 plugins/sudoers/filedigest.c:71
+#: plugins/sudoers/filedigest.c:66 plugins/sudoers/filedigest.c:70
 #: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:211
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
-#: plugins/sudoers/iolog.c:667 plugins/sudoers/iolog.c:693
-#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:447
-#: plugins/sudoers/ldap.c:622 plugins/sudoers/ldap.c:786
-#: plugins/sudoers/ldap.c:1210 plugins/sudoers/ldap.c:1636
-#: plugins/sudoers/ldap.c:1673 plugins/sudoers/ldap.c:1888
-#: plugins/sudoers/ldap.c:1997 plugins/sudoers/ldap.c:2013
+#: plugins/sudoers/iolog.c:675 plugins/sudoers/iolog.c:703
+#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:448
+#: plugins/sudoers/ldap.c:625 plugins/sudoers/ldap.c:789
+#: plugins/sudoers/ldap.c:1214 plugins/sudoers/ldap.c:1642
+#: plugins/sudoers/ldap.c:1679 plugins/sudoers/ldap.c:1897
+#: plugins/sudoers/ldap.c:2007 plugins/sudoers/ldap.c:2023
 #: plugins/sudoers/ldap_conf.c:215 plugins/sudoers/ldap_conf.c:247
 #: plugins/sudoers/ldap_conf.c:299 plugins/sudoers/ldap_conf.c:335
 #: plugins/sudoers/ldap_conf.c:441 plugins/sudoers/ldap_conf.c:456
-#: plugins/sudoers/ldap_conf.c:562 plugins/sudoers/ldap_conf.c:595
-#: plugins/sudoers/ldap_conf.c:690 plugins/sudoers/ldap_conf.c:773
+#: plugins/sudoers/ldap_conf.c:565 plugins/sudoers/ldap_conf.c:598
+#: plugins/sudoers/ldap_conf.c:693 plugins/sudoers/ldap_conf.c:776
 #: plugins/sudoers/ldap_util.c:293 plugins/sudoers/ldap_util.c:300
 #: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
 #: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:228
 #: plugins/sudoers/log_client.c:250 plugins/sudoers/log_client.c:264
 #: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:717
 #: plugins/sudoers/log_client.c:739 plugins/sudoers/log_client.c:744
-#: plugins/sudoers/log_client.c:1423 plugins/sudoers/log_client.c:1544
-#: plugins/sudoers/log_client.c:1667 plugins/sudoers/log_client.c:1986
-#: plugins/sudoers/log_client.c:2045 plugins/sudoers/logging.c:110
-#: plugins/sudoers/logging.c:188 plugins/sudoers/logging.c:189
-#: plugins/sudoers/logging.c:457 plugins/sudoers/logging.c:690
-#: plugins/sudoers/logging.c:734 plugins/sudoers/logging.c:846
-#: plugins/sudoers/logging.c:899 plugins/sudoers/logging.c:906
-#: plugins/sudoers/match_command.c:294 plugins/sudoers/match_command.c:562
-#: plugins/sudoers/match_command.c:628 plugins/sudoers/match_command.c:724
-#: plugins/sudoers/match_command.c:769 plugins/sudoers/match_digest.c:82
-#: plugins/sudoers/parse.c:278 plugins/sudoers/parse.c:295
-#: plugins/sudoers/parse.c:314 plugins/sudoers/parse.c:333
-#: plugins/sudoers/parse.c:350 plugins/sudoers/parse.c:373
-#: plugins/sudoers/parse.c:384 plugins/sudoers/parse_ldif.c:152
+#: plugins/sudoers/log_client.c:1426 plugins/sudoers/log_client.c:1547
+#: plugins/sudoers/log_client.c:1670 plugins/sudoers/log_client.c:1993
+#: plugins/sudoers/log_client.c:2052 plugins/sudoers/logging.c:110
+#: plugins/sudoers/logging.c:189 plugins/sudoers/logging.c:190
+#: plugins/sudoers/logging.c:475 plugins/sudoers/logging.c:711
+#: plugins/sudoers/logging.c:755 plugins/sudoers/logging.c:872
+#: plugins/sudoers/logging.c:925 plugins/sudoers/logging.c:932
+#: plugins/sudoers/lookup.c:337 plugins/sudoers/lookup.c:354
+#: plugins/sudoers/lookup.c:373 plugins/sudoers/lookup.c:392
+#: plugins/sudoers/lookup.c:409 plugins/sudoers/lookup.c:432
+#: plugins/sudoers/lookup.c:443 plugins/sudoers/match_command.c:301
+#: plugins/sudoers/match_command.c:573 plugins/sudoers/match_command.c:640
+#: plugins/sudoers/match_command.c:737 plugins/sudoers/match_command.c:784
+#: plugins/sudoers/match_digest.c:88 plugins/sudoers/parse_ldif.c:152
 #: plugins/sudoers/parse_ldif.c:183 plugins/sudoers/parse_ldif.c:252
 #: plugins/sudoers/parse_ldif.c:260 plugins/sudoers/parse_ldif.c:265
 #: plugins/sudoers/parse_ldif.c:341 plugins/sudoers/parse_ldif.c:352
 #: plugins/sudoers/parse_ldif.c:379 plugins/sudoers/parse_ldif.c:396
 #: plugins/sudoers/parse_ldif.c:408 plugins/sudoers/parse_ldif.c:412
 #: plugins/sudoers/parse_ldif.c:426 plugins/sudoers/parse_ldif.c:484
-#: plugins/sudoers/parse_ldif.c:598 plugins/sudoers/parse_ldif.c:627
-#: plugins/sudoers/parse_ldif.c:652 plugins/sudoers/parse_ldif.c:710
-#: plugins/sudoers/parse_ldif.c:727 plugins/sudoers/parse_ldif.c:755
-#: plugins/sudoers/parse_ldif.c:762 plugins/sudoers/policy.c:148
-#: plugins/sudoers/policy.c:157 plugins/sudoers/policy.c:166
-#: plugins/sudoers/policy.c:196 plugins/sudoers/policy.c:366
-#: plugins/sudoers/policy.c:381 plugins/sudoers/policy.c:383
-#: plugins/sudoers/policy.c:421 plugins/sudoers/policy.c:430
-#: plugins/sudoers/policy.c:478 plugins/sudoers/policy.c:488
-#: plugins/sudoers/policy.c:497 plugins/sudoers/policy.c:506
-#: plugins/sudoers/policy.c:515 plugins/sudoers/policy.c:622
-#: plugins/sudoers/policy.c:1050 plugins/sudoers/prompt.c:93
-#: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
-#: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
-#: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
-#: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:945
-#: plugins/sudoers/pwutil.c:993 plugins/sudoers/pwutil.c:1052
-#: plugins/sudoers/set_perms.c:369 plugins/sudoers/set_perms.c:717
-#: plugins/sudoers/set_perms.c:1089 plugins/sudoers/set_perms.c:1401
-#: plugins/sudoers/set_perms.c:1570 plugins/sudoers/sssd.c:144
-#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
-#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
-#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:762
-#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:126
-#: plugins/sudoers/stubs.c:134 plugins/sudoers/sudoers.c:352
-#: plugins/sudoers/sudoers.c:378 plugins/sudoers/sudoers.c:441
-#: plugins/sudoers/sudoers.c:673 plugins/sudoers/sudoers.c:683
-#: plugins/sudoers/sudoers.c:824 plugins/sudoers/sudoers.c:890
-#: plugins/sudoers/sudoers.c:946 plugins/sudoers/sudoers.c:998
-#: plugins/sudoers/sudoers.c:1174 plugins/sudoers/sudoers.c:1241
-#: plugins/sudoers/sudoers.c:1324 plugins/sudoers/sudoers.c:1513
+#: plugins/sudoers/parse_ldif.c:595 plugins/sudoers/parse_ldif.c:624
+#: plugins/sudoers/parse_ldif.c:649 plugins/sudoers/parse_ldif.c:707
+#: plugins/sudoers/parse_ldif.c:724 plugins/sudoers/parse_ldif.c:752
+#: plugins/sudoers/parse_ldif.c:759 plugins/sudoers/policy.c:157
+#: plugins/sudoers/policy.c:166 plugins/sudoers/policy.c:175
+#: plugins/sudoers/policy.c:204 plugins/sudoers/policy.c:374
+#: plugins/sudoers/policy.c:390 plugins/sudoers/policy.c:392
+#: plugins/sudoers/policy.c:430 plugins/sudoers/policy.c:439
+#: plugins/sudoers/policy.c:448 plugins/sudoers/policy.c:457
+#: plugins/sudoers/policy.c:493 plugins/sudoers/policy.c:502
+#: plugins/sudoers/policy.c:511 plugins/sudoers/policy.c:520
+#: plugins/sudoers/policy.c:529 plugins/sudoers/policy.c:538
+#: plugins/sudoers/policy.c:547 plugins/sudoers/policy.c:646
+#: plugins/sudoers/policy.c:1061 plugins/sudoers/prompt.c:94
+#: plugins/sudoers/pwutil.c:219 plugins/sudoers/pwutil.c:290
+#: plugins/sudoers/pwutil.c:368 plugins/sudoers/pwutil.c:542
+#: plugins/sudoers/pwutil.c:607 plugins/sudoers/pwutil.c:679
+#: plugins/sudoers/pwutil.c:877 plugins/sudoers/pwutil.c:967
+#: plugins/sudoers/pwutil.c:1015 plugins/sudoers/pwutil.c:1076
+#: plugins/sudoers/set_perms.c:374 plugins/sudoers/set_perms.c:723
+#: plugins/sudoers/set_perms.c:1096 plugins/sudoers/set_perms.c:1409
+#: plugins/sudoers/set_perms.c:1579 plugins/sudoers/sethost.c:85
+#: plugins/sudoers/sssd.c:144 plugins/sudoers/sssd.c:186
+#: plugins/sudoers/sssd.c:415 plugins/sudoers/sssd.c:480
+#: plugins/sudoers/sssd.c:507 plugins/sudoers/sssd.c:570
+#: plugins/sudoers/sssd.c:765 plugins/sudoers/strvec_join.c:53
+#: plugins/sudoers/sudoers.c:405 plugins/sudoers/sudoers.c:412
+#: plugins/sudoers/sudoers.c:656 plugins/sudoers/sudoers.c:666
+#: plugins/sudoers/sudoers.c:811 plugins/sudoers/sudoers.c:877
+#: plugins/sudoers/sudoers.c:936 plugins/sudoers/sudoers.c:985
+#: plugins/sudoers/sudoers.c:1144 plugins/sudoers/sudoers.c:1213
+#: plugins/sudoers/sudoers.c:1306 plugins/sudoers/sudoers_cb.c:150
 #: plugins/sudoers/sudoreplay.c:559 plugins/sudoers/sudoreplay.c:562
-#: plugins/sudoers/sudoreplay.c:1278 plugins/sudoers/sudoreplay.c:1334
-#: plugins/sudoers/sudoreplay.c:1530 plugins/sudoers/sudoreplay.c:1534
-#: plugins/sudoers/testsudoers.c:123 plugins/sudoers/testsudoers.c:220
-#: plugins/sudoers/testsudoers.c:233 plugins/sudoers/testsudoers.c:250
-#: plugins/sudoers/testsudoers.c:617 plugins/sudoers/timestamp.c:476
-#: plugins/sudoers/timestamp.c:520 plugins/sudoers/timestamp.c:1042
-#: plugins/sudoers/timestamp.c:1171 plugins/sudoers/toke_util.c:78
-#: plugins/sudoers/toke_util.c:106 plugins/sudoers/toke_util.c:131
-#: plugins/sudoers/toke_util.c:160 plugins/sudoers/toke_util.c:200
-#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:154
-#: plugins/sudoers/visudo.c:263 plugins/sudoers/visudo.c:388
-#: plugins/sudoers/visudo.c:394 plugins/sudoers/visudo.c:505
-#: plugins/sudoers/visudo.c:1065 plugins/sudoers/visudo.c:1086
-#: plugins/sudoers/visudo.c:1180 toke.l:1032 toke.l:1195 toke.l:1223
-#: toke.l:1288 toke.l:1299
+#: plugins/sudoers/sudoreplay.c:1279 plugins/sudoers/sudoreplay.c:1335
+#: plugins/sudoers/sudoreplay.c:1531 plugins/sudoers/sudoreplay.c:1535
+#: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:255
+#: plugins/sudoers/testsudoers.c:264 plugins/sudoers/testsudoers.c:275
+#: plugins/sudoers/testsudoers.c:282 plugins/sudoers/testsudoers.c:302
+#: plugins/sudoers/testsudoers.c:758 plugins/sudoers/timestamp.c:469
+#: plugins/sudoers/timestamp.c:513 plugins/sudoers/timestamp.c:1042
+#: plugins/sudoers/timestamp.c:1216 plugins/sudoers/toke_util.c:79
+#: plugins/sudoers/toke_util.c:108 plugins/sudoers/toke_util.c:134
+#: plugins/sudoers/toke_util.c:163 plugins/sudoers/toke_util.c:204
+#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:151
+#: plugins/sudoers/visudo.c:258 plugins/sudoers/visudo.c:383
+#: plugins/sudoers/visudo.c:389 plugins/sudoers/visudo.c:501
+#: plugins/sudoers/visudo.c:1073 plugins/sudoers/visudo.c:1094
+#: plugins/sudoers/visudo.c:1189 toke.l:1031 toke.l:1194 toke.l:1213
+#: toke.l:1240 toke.l:1309 toke.l:1320
 #, c-format
 msgid "%s: %s"
 msgstr ""
@@ -448,26 +453,26 @@ msgstr ""
 msgid "unable to execute %s: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:393 plugins/sudoers/auth/aix_auth.c:198
+#: lib/eventlog/eventlog.c:394 plugins/sudoers/auth/aix_auth.c:199
 msgid "unable to fork"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:403 lib/eventlog/eventlog.c:468
+#: lib/eventlog/eventlog.c:404 lib/eventlog/eventlog.c:471
 #, c-format
 msgid "unable to fork: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:458
+#: lib/eventlog/eventlog.c:461
 #, c-format
 msgid "unable to open pipe: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:958
+#: lib/eventlog/eventlog.c:1000
 #, c-format
 msgid "%8s : %s"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:987
+#: lib/eventlog/eventlog.c:1029
 #, c-format
 msgid "%8s : (command continued) %s"
 msgstr ""
@@ -481,73 +486,73 @@ msgstr ""
 msgid "JSON_ARRAY too large"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:494
+#: lib/eventlog/parse_json.c:506
 msgid "missing double quote in name"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:612
+#: lib/eventlog/parse_json.c:624
 msgid "missing JSON_OBJECT"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:616
+#: lib/eventlog/parse_json.c:628
 #, c-format
 msgid "expected JSON_OBJECT, got %d"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:750
+#: lib/eventlog/parse_json.c:762
 #, c-format
 msgid "json stack exhausted (max %u frames)"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:828
+#: lib/eventlog/parse_json.c:840
 msgid "objects must consist of name:value pairs"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:833 lib/eventlog/parse_json.c:864
-#: lib/eventlog/parse_json.c:908 lib/eventlog/parse_json.c:930
-#: lib/eventlog/parse_json.c:952 lib/eventlog/parse_json.c:974
-#: lib/eventlog/parse_json.c:996
+#: lib/eventlog/parse_json.c:845 lib/eventlog/parse_json.c:876
+#: lib/eventlog/parse_json.c:920 lib/eventlog/parse_json.c:942
+#: lib/eventlog/parse_json.c:964 lib/eventlog/parse_json.c:986
+#: lib/eventlog/parse_json.c:1008
 msgid "missing separator between values"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:848 lib/eventlog/parse_json.c:1022
+#: lib/eventlog/parse_json.c:860 lib/eventlog/parse_json.c:1034
 msgid "unmatched close brace"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:859
+#: lib/eventlog/parse_json.c:871
 msgid "unexpected array"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:879 lib/eventlog/parse_json.c:1025
+#: lib/eventlog/parse_json.c:891 lib/eventlog/parse_json.c:1037
 msgid "unmatched close bracket"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:890
+#: lib/eventlog/parse_json.c:902
 msgid "unexpected string"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:901
+#: lib/eventlog/parse_json.c:913
 msgid "missing colon after name"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:922 lib/eventlog/parse_json.c:944
+#: lib/eventlog/parse_json.c:934 lib/eventlog/parse_json.c:956
 msgid "unexpected boolean"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:966
+#: lib/eventlog/parse_json.c:978
 msgid "unexpected null"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:987
+#: lib/eventlog/parse_json.c:999
 msgid "unexpected number"
 msgstr ""
 
-#: lib/eventlog/parse_json.c:1033
+#: lib/eventlog/parse_json.c:1045
 msgid "parse error"
 msgstr ""
 
-#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1241
-#: plugins/sudoers/sudoreplay.c:1290 plugins/sudoers/sudoreplay.c:1586
+#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1290
+#: plugins/sudoers/sudoreplay.c:1291 plugins/sudoers/sudoreplay.c:1587
 #, c-format
 msgid "invalid regular expression \"%s\": %s"
 msgstr ""
@@ -562,22 +567,22 @@ msgstr ""
 msgid "%s: time stamp field is missing"
 msgstr ""
 
-#: lib/iolog/iolog_legacy.c:89
+#: lib/iolog/iolog_legacy.c:90
 #, c-format
 msgid "%s: time stamp %s: %s"
 msgstr ""
 
-#: lib/iolog/iolog_legacy.c:96
+#: lib/iolog/iolog_legacy.c:97
 #, c-format
 msgid "%s: user field is missing"
 msgstr ""
 
-#: lib/iolog/iolog_legacy.c:107
+#: lib/iolog/iolog_legacy.c:108
 #, c-format
 msgid "%s: runas user field is missing"
 msgstr ""
 
-#: lib/iolog/iolog_legacy.c:118
+#: lib/iolog/iolog_legacy.c:119
 #, c-format
 msgid "%s: runas group field is missing"
 msgstr ""
@@ -587,14 +592,14 @@ msgstr ""
 msgid "%s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/iolog/iolog_mkdirs.c:123 lib/iolog/iolog_mkdtemp.c:79
-#: logsrvd/iolog_writer.c:781 plugins/sudoers/timestamp.c:234
+#: lib/iolog/iolog_mkdirs.c:124 lib/iolog/iolog_mkdtemp.c:80
+#: logsrvd/iolog_writer.c:795 plugins/sudoers/timestamp.c:218
 #, c-format
 msgid "unable to mkdir %s"
 msgstr ""
 
-#: lib/iolog/iolog_mkdtemp.c:84 plugins/sudoers/visudo.c:760
-#: plugins/sudoers/visudo.c:794 plugins/sudoers/visudo.c:800
+#: lib/iolog/iolog_mkdtemp.c:85 plugins/sudoers/visudo.c:769
+#: plugins/sudoers/visudo.c:803 plugins/sudoers/visudo.c:809
 #, c-format
 msgid "unable to change mode of %s to 0%o"
 msgstr ""
@@ -626,90 +631,90 @@ msgstr ""
 msgid "%s: protocol error: NULL value found in %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:993
-#: plugins/sudoers/policy.c:589
+#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:1024
+#: plugins/sudoers/policy.c:613
 msgid "unable to generate UUID"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:341 logsrvd/iolog_writer.c:346
-#: logsrvd/iolog_writer.c:351 logsrvd/iolog_writer.c:356
+#: logsrvd/iolog_writer.c:354 logsrvd/iolog_writer.c:359
+#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:369
 #, c-format
 msgid "%s: protocol error: %s missing from AcceptMessage"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:417
+#: logsrvd/iolog_writer.c:430
 #, c-format
 msgid "%s: unable to format session id"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:431 logsrvd/iolog_writer.c:445
-#: logsrvd/iolog_writer.c:459 logsrvd/iolog_writer.c:474
-#: logsrvd/iolog_writer.c:488 logsrvd/iolog_writer.c:502
+#: logsrvd/iolog_writer.c:444 logsrvd/iolog_writer.c:458
+#: logsrvd/iolog_writer.c:472 logsrvd/iolog_writer.c:487
+#: logsrvd/iolog_writer.c:501 logsrvd/iolog_writer.c:515
 #, c-format
 msgid "%s: %s is not set"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:538 logsrvd/iolog_writer.c:545
+#: logsrvd/iolog_writer.c:551 logsrvd/iolog_writer.c:558
 #, c-format
 msgid "unable to expand iolog path %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:563
+#: logsrvd/iolog_writer.c:576
 #, c-format
 msgid "unable to create iolog path %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:593
+#: logsrvd/iolog_writer.c:606
 #, c-format
 msgid "invalid iofd %d"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:613
+#: logsrvd/iolog_writer.c:626
 #, c-format
-msgid "error closing iofd %d: %s"
+msgid "error closing iofd %u: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:633
+#: logsrvd/iolog_writer.c:647
 #, c-format
-msgid "error flushing iofd %d: %s"
+msgid "error flushing iofd %u: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:751
+#: logsrvd/iolog_writer.c:765
 #, c-format
 msgid "invalid I/O log %s: %s referenced but not present"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:390
+#: logsrvd/iolog_writer.c:777 logsrvd/logsrvd_journal.c:391
 #, c-format
 msgid "%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:433
+#: logsrvd/iolog_writer.c:799 logsrvd/logsrvd_journal.c:434
 #: logsrvd/logsrvd_queue.c:115 logsrvd/tls_init.c:256
-#: plugins/sudoers/check.c:292 plugins/sudoers/cvtsudoers.c:751
-#: plugins/sudoers/cvtsudoers.c:772 plugins/sudoers/cvtsudoers.c:1452
+#: plugins/sudoers/check.c:285 plugins/sudoers/cvtsudoers.c:758
+#: plugins/sudoers/cvtsudoers.c:780 plugins/sudoers/cvtsudoers.c:1461
 #: plugins/sudoers/cvtsudoers_csv.c:697 plugins/sudoers/cvtsudoers_json.c:902
-#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1310
-#: plugins/sudoers/sudoers.c:1334 plugins/sudoers/sudoreplay.c:1496
-#: plugins/sudoers/timestamp.c:485 plugins/sudoers/tsdump.c:128
-#: plugins/sudoers/visudo.c:982
+#: plugins/sudoers/cvtsudoers_ldif.c:711 plugins/sudoers/sudoers.c:1291
+#: plugins/sudoers/sudoers.c:1317 plugins/sudoers/sudoreplay.c:1497
+#: plugins/sudoers/timestamp.c:478 plugins/sudoers/tsdump.c:128
+#: plugins/sudoers/visudo.c:990
 #, c-format
 msgid "unable to open %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:797 logsrvd/logsrv_util.c:111
+#: logsrvd/iolog_writer.c:811 logsrvd/logsrv_util.c:111
 #: logsrvd/logsrv_util.c:118 plugins/sudoers/sudoreplay.c:355
 #: plugins/sudoers/sudoreplay.c:361
 #, c-format
 msgid "unable to open %s/%s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:810
+#: logsrvd/iolog_writer.c:824
 #, c-format
 msgid "unable to copy %s/%s to %s/%s: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:839 logsrvd/logsrvd_journal.c:198
+#: logsrvd/iolog_writer.c:853 logsrvd/logsrvd_journal.c:198
 #, c-format
 msgid "unable to rename %s to %s"
 msgstr ""
@@ -733,37 +738,37 @@ msgstr ""
 msgid "unable to connect to relay"
 msgstr ""
 
-#: logsrvd/logsrvd.c:338 logsrvd/logsrvd_relay.c:844
+#: logsrvd/logsrvd.c:338 logsrvd/logsrvd_relay.c:847
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
 
 #: logsrvd/logsrvd.c:430 logsrvd/logsrvd.c:553 logsrvd/logsrvd.c:639
-#: logsrvd/logsrvd.c:881 logsrvd/logsrvd.c:895 logsrvd/logsrvd.c:1057
-#: logsrvd/logsrvd.c:1182 logsrvd/logsrvd.c:1355 logsrvd/logsrvd.c:1373
-#: logsrvd/logsrvd.c:1472 logsrvd/logsrvd.c:1597 logsrvd/logsrvd.c:1784
-#: logsrvd/logsrvd_journal.c:502 logsrvd/logsrvd_local.c:238
+#: logsrvd/logsrvd.c:881 logsrvd/logsrvd.c:895 logsrvd/logsrvd.c:1056
+#: logsrvd/logsrvd.c:1181 logsrvd/logsrvd.c:1354 logsrvd/logsrvd.c:1372
+#: logsrvd/logsrvd.c:1471 logsrvd/logsrvd.c:1596 logsrvd/logsrvd.c:1783
+#: logsrvd/logsrvd_journal.c:503 logsrvd/logsrvd_local.c:238
 #: logsrvd/logsrvd_queue.c:164 logsrvd/logsrvd_relay.c:172
 #: logsrvd/logsrvd_relay.c:249 logsrvd/logsrvd_relay.c:253
 #: logsrvd/logsrvd_relay.c:391 logsrvd/logsrvd_relay.c:583
-#: logsrvd/logsrvd_relay.c:744 logsrvd/logsrvd_relay.c:1133
-#: logsrvd/sendlog.c:1300 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
-#: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:277
-#: plugins/sudoers/iolog.c:1030 plugins/sudoers/iolog.c:1163
-#: plugins/sudoers/iolog.c:1261 plugins/sudoers/log_client.c:121
+#: logsrvd/logsrvd_relay.c:747 logsrvd/logsrvd_relay.c:1137
+#: logsrvd/sendlog.c:1308 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
+#: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:281
+#: plugins/sudoers/iolog.c:1041 plugins/sudoers/iolog.c:1175
+#: plugins/sudoers/iolog.c:1274 plugins/sudoers/log_client.c:121
 #: plugins/sudoers/log_client.c:343 plugins/sudoers/log_client.c:359
 #: plugins/sudoers/log_client.c:407 plugins/sudoers/log_client.c:613
-#: plugins/sudoers/log_client.c:620 plugins/sudoers/log_client.c:1111
-#: plugins/sudoers/log_client.c:1392 plugins/sudoers/log_client.c:1433
-#: plugins/sudoers/log_client.c:1441 plugins/sudoers/log_client.c:1600
-#: plugins/sudoers/log_client.c:1724 plugins/sudoers/log_client.c:2053
-#: plugins/sudoers/log_client.c:2061 plugins/sudoers/logging.c:147
-#: plugins/sudoers/logging.c:205 plugins/sudoers/sudoreplay.c:519
+#: plugins/sudoers/log_client.c:620 plugins/sudoers/log_client.c:1114
+#: plugins/sudoers/log_client.c:1395 plugins/sudoers/log_client.c:1436
+#: plugins/sudoers/log_client.c:1444 plugins/sudoers/log_client.c:1603
+#: plugins/sudoers/log_client.c:1728 plugins/sudoers/log_client.c:2060
+#: plugins/sudoers/log_client.c:2068 plugins/sudoers/logging.c:148
+#: plugins/sudoers/logging.c:206 plugins/sudoers/sudoreplay.c:519
 #: plugins/sudoers/sudoreplay.c:566 plugins/sudoers/sudoreplay.c:808
 #: plugins/sudoers/sudoreplay.c:920 plugins/sudoers/sudoreplay.c:1011
 #: plugins/sudoers/sudoreplay.c:1026 plugins/sudoers/sudoreplay.c:1033
 #: plugins/sudoers/sudoreplay.c:1040 plugins/sudoers/sudoreplay.c:1047
-#: plugins/sudoers/sudoreplay.c:1054 plugins/sudoers/sudoreplay.c:1181
+#: plugins/sudoers/sudoreplay.c:1054 plugins/sudoers/sudoreplay.c:1182
 msgid "unable to add event to queue"
 msgstr ""
 
@@ -823,14 +828,14 @@ msgstr ""
 msgid "invalid CommandSuspend"
 msgstr ""
 
-#: logsrvd/logsrvd.c:790 logsrvd/logsrvd_journal.c:301
-#: logsrvd/logsrvd_relay.c:654 logsrvd/sendlog.c:1201
-#: plugins/sudoers/log_client.c:1590
+#: logsrvd/logsrvd.c:790 logsrvd/logsrvd_journal.c:302
+#: logsrvd/logsrvd_relay.c:654 logsrvd/sendlog.c:1207
+#: plugins/sudoers/log_client.c:1593
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:835 logsrvd/logsrvd_journal.c:375
+#: logsrvd/logsrvd.c:835 logsrvd/logsrvd_journal.c:376
 #: logsrvd/logsrvd_relay.c:678
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
@@ -845,112 +850,112 @@ msgstr ""
 msgid "timed out writing to client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:932 logsrvd/logsrvd_relay.c:916 logsrvd/sendlog.c:1404
+#: logsrvd/logsrvd.c:932 logsrvd/logsrvd_relay.c:919 logsrvd/sendlog.c:1413
 #, c-format
 msgid "missing write buffer for client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1028
+#: logsrvd/logsrvd.c:1027
 #, c-format
 msgid "timed out reading from client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1069 logsrvd/logsrvd_relay.c:779
+#: logsrvd/logsrvd.c:1068 logsrvd/logsrvd_relay.c:782
 #, c-format
 msgid "EOF from %s without proper TLS shutdown"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1113 logsrvd/logsrvd_relay.c:205 logsrvd/sendlog.c:331
+#: logsrvd/logsrvd.c:1112 logsrvd/logsrvd_relay.c:205 logsrvd/sendlog.c:336
 #: plugins/sudoers/log_client.c:723
 #, c-format
 msgid "client message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1114 logsrvd/logsrvd_journal.c:259
+#: logsrvd/logsrvd.c:1113 logsrvd/logsrvd_journal.c:259
 #: logsrvd/logsrvd_journal.c:260
 msgid "client message too large"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1132 logsrvd/logsrvd.c:1133
+#: logsrvd/logsrvd.c:1131 logsrvd/logsrvd.c:1132
 msgid "invalid ClientMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1433
+#: logsrvd/logsrvd.c:1432
 msgid "unable to get remote IP addr"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1464 logsrvd/tls_client.c:203
+#: logsrvd/logsrvd.c:1463 logsrvd/tls_client.c:203
 #: plugins/sudoers/log_client.c:281
 #, c-format
 msgid "Unable to attach user data to the ssl object: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1647 logsrvd/logsrvd.c:2003
+#: logsrvd/logsrvd.c:1646 logsrvd/logsrvd.c:2007
 msgid "unable to setup listen socket"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1767
+#: logsrvd/logsrvd.c:1766
 #, c-format
 msgid "unexpected signal %d"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1905
+#: logsrvd/logsrvd.c:1909
 msgid "sudo log server"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1907 logsrvd/sendlog.c:121
+#: logsrvd/logsrvd.c:1911 logsrvd/sendlog.c:126
 msgid "Options:"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1909
+#: logsrvd/logsrvd.c:1913
 msgid "path to configuration file"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1911 logsrvd/sendlog.c:123
+#: logsrvd/logsrvd.c:1915 logsrvd/sendlog.c:128
 msgid "display help message and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1913
+#: logsrvd/logsrvd.c:1917
 msgid "do not fork, run in the foreground"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1915
+#: logsrvd/logsrvd.c:1919
 msgid "percent chance connections will drop"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1917 logsrvd/sendlog.c:153
+#: logsrvd/logsrvd.c:1921 logsrvd/sendlog.c:158
 msgid "display version information and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1967 logsrvd/sendlog.c:1711
+#: logsrvd/logsrvd.c:1971 logsrvd/sendlog.c:1722
 msgid "Protobuf-C version 1.3 or higher required"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1983
+#: logsrvd/logsrvd.c:1987
 #, c-format
 msgid "invalid random drop value: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1986 logsrvd/sendlog.c:1765
-#: plugins/sudoers/cvtsudoers.c:247 plugins/sudoers/sudoreplay.c:294
-#: plugins/sudoers/visudo.c:186
+#: logsrvd/logsrvd.c:1990 logsrvd/sendlog.c:1776
+#: plugins/sudoers/cvtsudoers.c:250 plugins/sudoers/sudoreplay.c:294
+#: plugins/sudoers/visudo.c:181
 #, c-format
 msgid "%s version %s\n"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:358
+#: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:69
 #: plugins/sudoers/exptilde.c:85 plugins/sudoers/iolog.c:122
-#: plugins/sudoers/sudoers.c:448 plugins/sudoers/sudoers.c:939
-#: plugins/sudoers/sudoers.c:1041 plugins/sudoers/sudoers.c:1062
-#: plugins/sudoers/sudoers.c:1555 plugins/sudoers/testsudoers.c:224
-#: plugins/sudoers/testsudoers.c:393
+#: plugins/sudoers/sudoers.c:419 plugins/sudoers/sudoers.c:929
+#: plugins/sudoers/sudoers.c:1034 plugins/sudoers/sudoers.c:1424
+#: plugins/sudoers/testsudoers.c:169 plugins/sudoers/testsudoers.c:285
+#: plugins/sudoers/testsudoers.c:459
 #, c-format
 msgid "unknown user %s"
 msgstr ""
 
 #: logsrvd/logsrvd_conf.c:439 plugins/sudoers/iolog.c:148
-#: plugins/sudoers/sudoers.c:453 plugins/sudoers/sudoers.c:1589
-#: plugins/sudoers/testsudoers.c:417
+#: plugins/sudoers/sudoers.c:425 plugins/sudoers/sudoers.c:1458
+#: plugins/sudoers/testsudoers.c:483
 #, c-format
 msgid "unknown group %s"
 msgstr ""
@@ -1022,8 +1027,8 @@ msgstr ""
 msgid "%s:%d [%s] illegal key: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:269
-#: plugins/sudoers/logging.c:1046
+#: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:273
+#: plugins/sudoers/logging.c:1076
 #, c-format
 msgid "unable to open log file %s"
 msgstr ""
@@ -1036,13 +1041,13 @@ msgstr ""
 msgid "unable to initialize relay TLS context"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:149 logsrvd/logsrvd_journal.c:429
-#: logsrvd/logsrvd_journal.c:434
+#: logsrvd/logsrvd_journal.c:149 logsrvd/logsrvd_journal.c:430
+#: logsrvd/logsrvd_journal.c:435
 msgid "unable to create journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:153 logsrvd/logsrvd_queue.c:109
-#: plugins/sudoers/visudo.c:1038
+#: plugins/sudoers/visudo.c:1046
 #, c-format
 msgid "unable to lock %s"
 msgstr ""
@@ -1055,8 +1060,8 @@ msgstr ""
 msgid "unable to open journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:185 logsrvd/logsrvd_journal.c:465
-#: logsrvd/logsrvd_journal.c:470
+#: logsrvd/logsrvd_journal.c:185 logsrvd/logsrvd_journal.c:466
+#: logsrvd/logsrvd_journal.c:471
 msgid "unable to write journal file"
 msgstr ""
 
@@ -1065,20 +1070,20 @@ msgid "unable to rename journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:247 logsrvd/logsrvd_journal.c:248
-#: logsrvd/logsrvd_journal.c:287 logsrvd/logsrvd_journal.c:288
+#: logsrvd/logsrvd_journal.c:288 logsrvd/logsrvd_journal.c:289
 msgid "unexpected EOF reading journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:251 logsrvd/logsrvd_journal.c:252
-#: logsrvd/logsrvd_journal.c:291 logsrvd/logsrvd_journal.c:292
+#: logsrvd/logsrvd_journal.c:292 logsrvd/logsrvd_journal.c:293
 msgid "error reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:303 logsrvd/logsrvd_journal.c:389
+#: logsrvd/logsrvd_journal.c:304 logsrvd/logsrvd_journal.c:390
 msgid "invalid journal file, unable to restart"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:448
+#: logsrvd/logsrvd_journal.c:449
 #, c-format
 msgid "unable to seek to [%lld, %ld] in journal file %s"
 msgstr ""
@@ -1108,52 +1113,52 @@ msgstr ""
 msgid "error logging reject event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:427 logsrvd/logsrvd_local.c:435
+#: logsrvd/logsrvd_local.c:427 logsrvd/logsrvd_local.c:437
 msgid "error logging exit event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:492 logsrvd/logsrvd_local.c:493
+#: logsrvd/logsrvd_local.c:494 logsrvd/logsrvd_local.c:495
 msgid "log is already complete, cannot be restarted"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:523
+#: logsrvd/logsrvd_local.c:525
 msgid "unable to restart log"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:539
+#: logsrvd/logsrvd_local.c:541
 msgid "error parsing AlertMessage"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:549
+#: logsrvd/logsrvd_local.c:551
 msgid "error logging alert event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:585 logsrvd/logsrvd_local.c:648
-#: logsrvd/logsrvd_local.c:683
+#: logsrvd/logsrvd_local.c:587 logsrvd/logsrvd_local.c:650
+#: logsrvd/logsrvd_local.c:685
 #, c-format
 msgid "unable to format timing buffer, length %d"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:599 logsrvd/logsrvd_local.c:607
-#: logsrvd/logsrvd_local.c:655 logsrvd/logsrvd_local.c:690
-#: plugins/sudoers/sudoreplay.c:344 toke.l:982 toke.l:985
+#: logsrvd/logsrvd_local.c:601 logsrvd/logsrvd_local.c:609
+#: logsrvd/logsrvd_local.c:657 logsrvd/logsrvd_local.c:692
+#: plugins/sudoers/sudoreplay.c:344 toke.l:981 toke.l:984
 #, c-format
 msgid "%s/%s: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:618
+#: logsrvd/logsrvd_local.c:620
 msgid "randomly dropping connection"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:630
+#: logsrvd/logsrvd_local.c:632
 msgid "error writing IoBuffer"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:665
+#: logsrvd/logsrvd_local.c:667
 msgid "error writing ChangeWindowSize"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:700
+#: logsrvd/logsrvd_local.c:702
 msgid "error writing CommandSuspend"
 msgstr ""
 
@@ -1170,8 +1175,8 @@ msgstr ""
 msgid "%s: invalid ServerHello, missing server_id"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:522 logsrvd/sendlog.c:1105
-#: plugins/sudoers/log_client.c:1476
+#: logsrvd/logsrvd_relay.c:522 logsrvd/sendlog.c:1111
+#: plugins/sudoers/log_client.c:1479
 msgid "invalid ServerHello"
 msgstr ""
 
@@ -1188,175 +1193,175 @@ msgstr ""
 msgid "timeout reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:764
+#: logsrvd/logsrvd_relay.c:767
 msgid "relay host name does not match certificate"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:770 logsrvd/logsrvd_relay.c:784
-#: logsrvd/logsrvd_relay.c:791
+#: logsrvd/logsrvd_relay.c:773 logsrvd/logsrvd_relay.c:787
+#: logsrvd/logsrvd_relay.c:794
 msgid "error reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:812
+#: logsrvd/logsrvd_relay.c:815
 msgid "unable to read from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:827 logsrvd/logsrvd_relay.c:945
+#: logsrvd/logsrvd_relay.c:830 logsrvd/logsrvd_relay.c:949
 msgid "relay server closed connection"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:845
+#: logsrvd/logsrvd_relay.c:848
 msgid "server message too large"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:909
+#: logsrvd/logsrvd_relay.c:912
 #, c-format
 msgid "timed out writing to relay %s (%s)"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:911
+#: logsrvd/logsrvd_relay.c:914
 msgid "timeout writing to relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:964 logsrvd/logsrvd_relay.c:971
-#: logsrvd/logsrvd_relay.c:983
+#: logsrvd/logsrvd_relay.c:968 logsrvd/logsrvd_relay.c:975
+#: logsrvd/logsrvd_relay.c:987
 msgid "error writing to relay"
 msgstr ""
 
-#: logsrvd/sendlog.c:119
+#: logsrvd/sendlog.c:124
 msgid "send sudo I/O log to remote server"
 msgstr ""
 
-#: logsrvd/sendlog.c:125
+#: logsrvd/sendlog.c:130
 msgid "only send an accept event (no I/O)"
 msgstr ""
 
-#: logsrvd/sendlog.c:128
+#: logsrvd/sendlog.c:133
 msgid "certificate bundle file to verify server's cert against"
 msgstr ""
 
-#: logsrvd/sendlog.c:130
+#: logsrvd/sendlog.c:135
 msgid "certificate file for TLS handshake"
 msgstr ""
 
-#: logsrvd/sendlog.c:133
+#: logsrvd/sendlog.c:138
 msgid "host to send logs to"
 msgstr ""
 
-#: logsrvd/sendlog.c:135
+#: logsrvd/sendlog.c:140
 msgid "remote ID of I/O log to be resumed"
 msgstr ""
 
-#: logsrvd/sendlog.c:138
+#: logsrvd/sendlog.c:143
 msgid "private key file"
 msgstr ""
 
-#: logsrvd/sendlog.c:140
+#: logsrvd/sendlog.c:145
 msgid "do not verify server certificate"
 msgstr ""
 
-#: logsrvd/sendlog.c:143
+#: logsrvd/sendlog.c:148
 msgid "port to use when connecting to host"
 msgstr ""
 
-#: logsrvd/sendlog.c:145
+#: logsrvd/sendlog.c:150
 msgid "restart previous I/O log transfer"
 msgstr ""
 
-#: logsrvd/sendlog.c:147
+#: logsrvd/sendlog.c:152
 msgid "reject the command with the given reason"
 msgstr ""
 
-#: logsrvd/sendlog.c:149
+#: logsrvd/sendlog.c:154
 msgid "stop transfer after reaching this time"
 msgstr ""
 
-#: logsrvd/sendlog.c:151
+#: logsrvd/sendlog.c:156
 msgid "test audit server by sending selected I/O log n times in parallel"
 msgstr ""
 
-#: logsrvd/sendlog.c:176 plugins/sudoers/log_client.c:453
+#: logsrvd/sendlog.c:181 plugins/sudoers/log_client.c:453
 #, c-format
 msgid "unable to look up %s:%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:214
+#: logsrvd/sendlog.c:219
 msgid "unable to get server IP addr"
 msgstr ""
 
-#: logsrvd/sendlog.c:309 plugins/sudoers/sudoreplay.c:868
+#: logsrvd/sendlog.c:314 plugins/sudoers/sudoreplay.c:868
 #, c-format
 msgid "unable to read %s/%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1029 plugins/sudoers/iolog.c:948
-#: plugins/sudoers/iolog.c:1023
+#: logsrvd/sendlog.c:1035 plugins/sudoers/iolog.c:959
+#: plugins/sudoers/iolog.c:1034
 #, c-format
 msgid "unexpected I/O event %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1082 logsrvd/sendlog.c:1099 logsrvd/sendlog.c:1133
-#: plugins/sudoers/log_client.c:1126 plugins/sudoers/log_client.c:1402
-#: plugins/sudoers/log_client.c:1470 plugins/sudoers/log_client.c:1509
+#: logsrvd/sendlog.c:1088 logsrvd/sendlog.c:1105 logsrvd/sendlog.c:1139
+#: plugins/sudoers/log_client.c:1129 plugins/sudoers/log_client.c:1405
+#: plugins/sudoers/log_client.c:1473 plugins/sudoers/log_client.c:1512
 #, c-format
 msgid "%s: unexpected state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1169 plugins/sudoers/log_client.c:1558
+#: logsrvd/sendlog.c:1175 plugins/sudoers/log_client.c:1561
 #, c-format
 msgid "error message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1182 plugins/sudoers/log_client.c:1571
+#: logsrvd/sendlog.c:1188 plugins/sudoers/log_client.c:1574
 #, c-format
 msgid "abort message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1241 plugins/sudoers/log_client.c:1621
+#: logsrvd/sendlog.c:1247 plugins/sudoers/log_client.c:1624
 #, c-format
 msgid "%s: unexpected type_case value %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1270
+#: logsrvd/sendlog.c:1276
 msgid "timeout reading from server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1319 plugins/sudoers/log_client.c:1743
+#: logsrvd/sendlog.c:1327 plugins/sudoers/log_client.c:1747
 msgid "host name does not match certificate"
 msgstr ""
 
-#: logsrvd/sendlog.c:1352
+#: logsrvd/sendlog.c:1361
 msgid "premature EOF"
 msgstr ""
 
-#: logsrvd/sendlog.c:1365 plugins/sudoers/log_client.c:1790
+#: logsrvd/sendlog.c:1374 plugins/sudoers/log_client.c:1795
 #, c-format
 msgid "server message too large: %u"
 msgstr ""
 
-#: logsrvd/sendlog.c:1421
+#: logsrvd/sendlog.c:1430
 msgid "timeout writing to server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1788
+#: logsrvd/sendlog.c:1800
 msgid "both restart point and iolog ID must be specified"
 msgstr ""
 
-#: logsrvd/sendlog.c:1792
+#: logsrvd/sendlog.c:1804
 msgid "a restart point may not be set when no I/O is sent"
 msgstr ""
 
-#: logsrvd/sendlog.c:1868
+#: logsrvd/sendlog.c:1880
 #, c-format
 msgid "exited prematurely with state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1869
+#: logsrvd/sendlog.c:1881
 #, c-format
 msgid "elapsed time sent to server [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/sendlog.c:1871
+#: logsrvd/sendlog.c:1883
 #, c-format
 msgid "commit point received from server [%lld, %ld]"
 msgstr ""
@@ -1414,236 +1419,242 @@ msgstr ""
 msgid "unable to set minimum protocol version to TLS 1.2: %s"
 msgstr ""
 
-#: plugins/sudoers/audit.c:268 plugins/sudoers/audit.c:428
-#: plugins/sudoers/log_client.c:959 plugins/sudoers/log_client.c:1008
-#: plugins/sudoers/log_client.c:1057 plugins/sudoers/log_client.c:1182
-#: plugins/sudoers/logging.c:595 plugins/sudoers/logging.c:711
-#: plugins/sudoers/logging.c:833 plugins/sudoers/logging.c:1000
+#: plugins/sudoers/audit.c:272 plugins/sudoers/audit.c:452
+#: plugins/sudoers/log_client.c:962 plugins/sudoers/log_client.c:1011
+#: plugins/sudoers/log_client.c:1060 plugins/sudoers/log_client.c:1185
+#: plugins/sudoers/logging.c:614 plugins/sudoers/logging.c:732
+#: plugins/sudoers/logging.c:859 plugins/sudoers/logging.c:1031
 #: plugins/sudoers/policy.c:123
 msgid "unable to get time of day"
 msgstr ""
 
-#: plugins/sudoers/auth/aix_auth.c:280
+#: plugins/sudoers/auth/aix_auth.c:282
 #, c-format
 msgid "unable to change password for %s"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:77
+#: plugins/sudoers/auth/bsdauth.c:78
 #, c-format
 msgid "unable to get login class for user %s"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:84
+#: plugins/sudoers/auth/bsdauth.c:85
 msgid "invalid authentication type"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:89
+#: plugins/sudoers/auth/bsdauth.c:90
 msgid "unable to begin BSD authentication"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:96
+#: plugins/sudoers/auth/bsdauth.c:97
 msgid "unable to initialize BSD authentication"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:188
+#: plugins/sudoers/auth/bsdauth.c:191
 msgid "your account has expired"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:190
+#: plugins/sudoers/auth/bsdauth.c:193
 msgid "approval failed"
 msgstr ""
 
-#: plugins/sudoers/auth/fwtk.c:61
+#: plugins/sudoers/auth/fwtk.c:62
 msgid "unable to read fwtk config"
 msgstr ""
 
-#: plugins/sudoers/auth/fwtk.c:66
+#: plugins/sudoers/auth/fwtk.c:67
 msgid "unable to connect to authentication server"
 msgstr ""
 
-#: plugins/sudoers/auth/fwtk.c:72 plugins/sudoers/auth/fwtk.c:97
-#: plugins/sudoers/auth/fwtk.c:129
+#: plugins/sudoers/auth/fwtk.c:73 plugins/sudoers/auth/fwtk.c:99
+#: plugins/sudoers/auth/fwtk.c:131
 msgid "lost connection to authentication server"
 msgstr ""
 
-#: plugins/sudoers/auth/fwtk.c:76
+#: plugins/sudoers/auth/fwtk.c:77
 #, c-format
 msgid ""
 "authentication server error:\n"
 "%s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:115
+#: plugins/sudoers/auth/kerb5.c:116
 #, c-format
 msgid "%s: unable to convert principal to string ('%s'): %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:164
+#: plugins/sudoers/auth/kerb5.c:166
 #, c-format
 msgid "%s: unable to parse '%s': %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:173
+#: plugins/sudoers/auth/kerb5.c:175
 #, c-format
 msgid "%s: unable to resolve credential cache: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:222
+#: plugins/sudoers/auth/kerb5.c:226
 #, c-format
 msgid "%s: unable to allocate options: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:237
+#: plugins/sudoers/auth/kerb5.c:241
 #, c-format
 msgid "%s: unable to get credentials: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:250
+#: plugins/sudoers/auth/kerb5.c:254
 #, c-format
 msgid "%s: unable to initialize credential cache: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:253
+#: plugins/sudoers/auth/kerb5.c:257
 #, c-format
 msgid "%s: unable to store credential in cache: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:317
+#: plugins/sudoers/auth/kerb5.c:322
 #, c-format
 msgid "%s: unable to get host principal: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/kerb5.c:331
+#: plugins/sudoers/auth/kerb5.c:336
 #, c-format
 msgid "%s: Cannot verify TGT! Possible attack!: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:224
+#: plugins/sudoers/auth/pam.c:233
 #, c-format
 msgid "unable to initialize PAM: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:337
+#: plugins/sudoers/auth/pam.c:349
 #, c-format
 msgid "PAM authentication error: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:356
+#: plugins/sudoers/auth/pam.c:369
 msgid "account validation failure, is your account locked?"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:367
+#: plugins/sudoers/auth/pam.c:380
 msgid "Account or password is expired, reset your password and try again"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:373
+#: plugins/sudoers/auth/pam.c:387
 #, c-format
 msgid "unable to change expired password: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:384
+#: plugins/sudoers/auth/pam.c:398
 msgid "Password expired, contact your system administrator"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:389
+#: plugins/sudoers/auth/pam.c:403
 msgid ""
 "Account expired or PAM config lacks an \"account\" section for sudo, contact "
 "your system administrator"
 msgstr ""
 
-#: plugins/sudoers/auth/pam.c:397 plugins/sudoers/auth/pam.c:402
+#: plugins/sudoers/auth/pam.c:411 plugins/sudoers/auth/pam.c:416
 #, c-format
 msgid "PAM account management error: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/rfc1938.c:99 plugins/sudoers/visudo.c:271
+#: plugins/sudoers/auth/rfc1938.c:100 plugins/sudoers/visudo.c:266
 #, c-format
 msgid "you do not exist in the %s database"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:75
+#: plugins/sudoers/auth/securid5.c:76
 msgid "failed to initialise the ACE API library"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:106
+#: plugins/sudoers/auth/securid5.c:108
 msgid "unable to contact the SecurID server"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:115
+#: plugins/sudoers/auth/securid5.c:117
 msgid "User ID locked for SecurID Authentication"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:119 plugins/sudoers/auth/securid5.c:171
+#: plugins/sudoers/auth/securid5.c:121 plugins/sudoers/auth/securid5.c:174
 msgid "invalid username length for SecurID"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:123 plugins/sudoers/auth/securid5.c:176
+#: plugins/sudoers/auth/securid5.c:125 plugins/sudoers/auth/securid5.c:179
 msgid "invalid Authentication Handle for SecurID"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:127
+#: plugins/sudoers/auth/securid5.c:129
 msgid "SecurID communication failed"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:131 plugins/sudoers/auth/securid5.c:219
+#: plugins/sudoers/auth/securid5.c:133 plugins/sudoers/auth/securid5.c:222
 msgid "unknown SecurID error"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:166
+#: plugins/sudoers/auth/securid5.c:169
 msgid "invalid passcode length for SecurID"
 msgstr ""
 
-#: plugins/sudoers/auth/sia.c:69 plugins/sudoers/auth/sia.c:126
+#: plugins/sudoers/auth/sia.c:72 plugins/sudoers/auth/sia.c:130
 msgid "unable to initialize SIA session"
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:135
+#: plugins/sudoers/auth/sudo_auth.c:141
 msgid "invalid authentication methods"
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:137
+#: plugins/sudoers/auth/sudo_auth.c:143
 msgid ""
 "Invalid authentication methods compiled into sudo!  You may not mix "
 "standalone and non-standalone authentication."
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:258 plugins/sudoers/auth/sudo_auth.c:310
+#: plugins/sudoers/auth/sudo_auth.c:296 plugins/sudoers/auth/sudo_auth.c:359
 msgid "no authentication methods"
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:260
+#: plugins/sudoers/auth/sudo_auth.c:298
 msgid ""
 "There are no authentication methods compiled into sudo!  If you want to turn "
 "off authentication, use the --disable-authentication configure option."
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:312
+#: plugins/sudoers/auth/sudo_auth.c:361
 msgid "Unable to initialize authentication methods."
 msgstr ""
 
-#: plugins/sudoers/auth/sudo_auth.c:486
+#: plugins/sudoers/auth/sudo_auth.c:551
 msgid "Authentication methods:"
 msgstr ""
 
-#: plugins/sudoers/bsm_audit.c:123 plugins/sudoers/bsm_audit.c:214
+#: plugins/sudoers/bsm_audit.c:122 plugins/sudoers/bsm_audit.c:214
 msgid "Could not determine audit condition"
 msgstr ""
 
-#: plugins/sudoers/bsm_audit.c:188 plugins/sudoers/bsm_audit.c:277
+#: plugins/sudoers/bsm_audit.c:188 plugins/sudoers/bsm_audit.c:278
 msgid "unable to commit audit record"
 msgstr ""
 
-#: plugins/sudoers/check.c:285
+#: plugins/sudoers/check.c:63 plugins/sudoers/check.c:74
+#: plugins/sudoers/lookup.c:79 plugins/sudoers/tsdump.c:119
+#, c-format
+msgid "unknown uid %u"
+msgstr ""
+
+#: plugins/sudoers/check.c:277
 #, c-format
 msgid "error reading lecture file %s"
 msgstr ""
 
-#: plugins/sudoers/check.c:288
+#: plugins/sudoers/check.c:280
 #, c-format
 msgid "ignoring lecture file %s: not a regular file"
 msgstr ""
 
-#: plugins/sudoers/check.c:301
+#: plugins/sudoers/check.c:293
 msgid ""
 "\n"
 "We trust you have received the usual lecture from the local System\n"
@@ -1655,118 +1666,107 @@ msgid ""
 "\n"
 msgstr ""
 
-#: plugins/sudoers/check.c:309
+#: plugins/sudoers/check.c:301
 msgid ""
 "For security reasons, the password you type will not be visible.\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/check.c:353 plugins/sudoers/check.c:363
-#: plugins/sudoers/parse.c:80 plugins/sudoers/tsdump.c:119
-#, c-format
-msgid "unknown uid %u"
-msgstr ""
-
-#: plugins/sudoers/check_aliases.c:99 plugins/sudoers/defaults.c:1278
-#, c-format
-msgid "%s: %s\n"
-msgstr ""
-
-#: plugins/sudoers/check_aliases.c:133
+#: plugins/sudoers/check_aliases.c:93
 #, c-format
 msgid "cycle in %s \"%s\""
 msgstr ""
 
-#: plugins/sudoers/check_aliases.c:136
+#: plugins/sudoers/check_aliases.c:96
 #, c-format
 msgid "%s \"%s\" referenced but not defined"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:210
+#: plugins/sudoers/cvtsudoers.c:211
 #, c-format
 msgid "order increment: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:229
+#: plugins/sudoers/cvtsudoers.c:231
 #, c-format
 msgid "starting order: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:239
+#: plugins/sudoers/cvtsudoers.c:242
 #, c-format
 msgid "order padding: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:249 plugins/sudoers/visudo.c:188
+#: plugins/sudoers/cvtsudoers.c:252 plugins/sudoers/visudo.c:183
 #, c-format
 msgid "%s grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:278 plugins/sudoers/testsudoers.c:163
+#: plugins/sudoers/cvtsudoers.c:282 plugins/sudoers/testsudoers.c:162
 #, c-format
 msgid "unsupported input format %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:296
+#: plugins/sudoers/cvtsudoers.c:300
 #, c-format
 msgid "unsupported output format %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:386
+#: plugins/sudoers/cvtsudoers.c:392
 #, c-format
 msgid "%s: input and output files must be different"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:400 plugins/sudoers/sudoers.c:163
-#: plugins/sudoers/sudoers.c:221 plugins/sudoers/testsudoers.c:263
-#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:657
+#: plugins/sudoers/cvtsudoers.c:406 plugins/sudoers/sudoers.c:151
+#: plugins/sudoers/sudoers.c:209 plugins/sudoers/testsudoers.c:315
+#: plugins/sudoers/visudo.c:276 plugins/sudoers/visudo.c:666
 msgid "unable to initialize sudoers default values"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:526 plugins/sudoers/ldap_conf.c:431
+#: plugins/sudoers/cvtsudoers.c:533 plugins/sudoers/ldap_conf.c:431
 #, c-format
 msgid "%s: %s: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:605
+#: plugins/sudoers/cvtsudoers.c:612
 #, c-format
 msgid "%s: unknown key word %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:651
+#: plugins/sudoers/cvtsudoers.c:658
 #, c-format
 msgid "invalid defaults type: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:674
+#: plugins/sudoers/cvtsudoers.c:681
 #, c-format
 msgid "invalid suppression type: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:715 plugins/sudoers/cvtsudoers.c:731
+#: plugins/sudoers/cvtsudoers.c:722 plugins/sudoers/cvtsudoers.c:738
 #, c-format
 msgid "invalid filter: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:775 plugins/sudoers/visudo.c:992
+#: plugins/sudoers/cvtsudoers.c:783 plugins/sudoers/visudo.c:1000
 #, c-format
 msgid "failed to parse %s file, unknown error"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1499 plugins/sudoers/sudoreplay.c:1142
-#: plugins/sudoers/timestamp.c:368 plugins/sudoers/timestamp.c:371
+#: plugins/sudoers/cvtsudoers.c:1508 plugins/sudoers/sudoreplay.c:1143
+#: plugins/sudoers/timestamp.c:353 plugins/sudoers/timestamp.c:356
 #, c-format
 msgid "unable to write to %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1527
+#: plugins/sudoers/cvtsudoers.c:1536
 #, c-format
 msgid ""
 "%s - convert between sudoers file formats\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1529
+#: plugins/sudoers/cvtsudoers.c:1538
 msgid ""
 "\n"
 "Options:\n"
@@ -1789,34 +1789,34 @@ msgid ""
 msgstr ""
 
 #: plugins/sudoers/cvtsudoers_csv.c:192 plugins/sudoers/cvtsudoers_csv.c:199
-#: plugins/sudoers/cvtsudoers_ldif.c:244 plugins/sudoers/cvtsudoers_ldif.c:251
-#: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:340
+#: plugins/sudoers/cvtsudoers_ldif.c:245 plugins/sudoers/cvtsudoers_ldif.c:252
+#: plugins/sudoers/cvtsudoers_ldif.c:594 plugins/sudoers/env.c:340
 #: plugins/sudoers/env.c:347 plugins/sudoers/env.c:458
-#: plugins/sudoers/ldap.c:509 plugins/sudoers/ldap.c:626
-#: plugins/sudoers/ldap.c:999 plugins/sudoers/ldap_conf.c:219
+#: plugins/sudoers/ldap.c:511 plugins/sudoers/ldap.c:629
+#: plugins/sudoers/ldap.c:1003 plugins/sudoers/ldap_conf.c:219
 #: plugins/sudoers/ldap_conf.c:310 plugins/sudoers/ldap_util.c:486
-#: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:461
-#: plugins/sudoers/policy.c:824 plugins/sudoers/policy.c:835
-#: plugins/sudoers/prompt.c:168 plugins/sudoers/serialize_list.c:62
+#: plugins/sudoers/linux_audit.c:93 plugins/sudoers/logging.c:479
+#: plugins/sudoers/policy.c:828 plugins/sudoers/policy.c:840
+#: plugins/sudoers/prompt.c:169 plugins/sudoers/serialize_list.c:62
 #: plugins/sudoers/serialize_list.c:71 plugins/sudoers/strvec_join.c:62
-#: plugins/sudoers/sudoreplay.c:1339 plugins/sudoers/sudoreplay.c:1345
-#: plugins/sudoers/sudoreplay.c:1351 plugins/sudoers/testsudoers.c:254
-#: plugins/sudoers/toke_util.c:213 toke.l:996 toke.l:1259
+#: plugins/sudoers/sudoreplay.c:1340 plugins/sudoers/sudoreplay.c:1346
+#: plugins/sudoers/sudoreplay.c:1352 plugins/sudoers/testsudoers.c:306
+#: plugins/sudoers/toke_util.c:217 toke.l:995 toke.l:1277
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
 #: plugins/sudoers/cvtsudoers_csv.c:454 plugins/sudoers/cvtsudoers_csv.c:468
 #: plugins/sudoers/cvtsudoers_json.c:661 plugins/sudoers/cvtsudoers_json.c:676
-#: plugins/sudoers/cvtsudoers_ldif.c:347 plugins/sudoers/cvtsudoers_ldif.c:360
-#: plugins/sudoers/ldap.c:493
+#: plugins/sudoers/cvtsudoers_ldif.c:349 plugins/sudoers/cvtsudoers_ldif.c:362
+#: plugins/sudoers/ldap.c:495
 msgid "unable to get GMT time"
 msgstr ""
 
 #: plugins/sudoers/cvtsudoers_csv.c:459 plugins/sudoers/cvtsudoers_csv.c:473
 #: plugins/sudoers/cvtsudoers_json.c:666 plugins/sudoers/cvtsudoers_json.c:681
-#: plugins/sudoers/cvtsudoers_ldif.c:352 plugins/sudoers/cvtsudoers_ldif.c:365
-#: plugins/sudoers/ldap.c:501
+#: plugins/sudoers/cvtsudoers_ldif.c:354 plugins/sudoers/cvtsudoers_ldif.c:367
+#: plugins/sudoers/ldap.c:503
 msgid "unable to format timestamp"
 msgstr ""
 
@@ -1826,12 +1826,12 @@ msgstr ""
 msgid "%s:%d:%d: unknown defaults entry \"%s\""
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers_ldif.c:661
+#: plugins/sudoers/cvtsudoers_ldif.c:663
 #, c-format
 msgid "too many sudoers entries, maximum %u"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers_ldif.c:704
+#: plugins/sudoers/cvtsudoers_ldif.c:706
 msgid ""
 "the SUDOERS_BASE environment variable is not set and the -b option was not "
 "specified."
@@ -2616,52 +2616,98 @@ msgstr ""
 msgid "AppArmor profile to use in the new security context: %s"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:191
+#: plugins/sudoers/defaults.c:207
 #, c-format
 msgid "unknown defaults entry \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:234
+#: plugins/sudoers/defaults.c:251
 #, c-format
 msgid "no value specified for \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:243
+#: plugins/sudoers/defaults.c:260
 #, c-format
 msgid "invalid operator \"%c=\" for \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:275
+#: plugins/sudoers/defaults.c:292
 #, c-format
 msgid "option \"%s\" does not take a value"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:299
+#: plugins/sudoers/defaults.c:319
 #, c-format
 msgid "invalid Defaults type 0x%x for option \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:306
+#: plugins/sudoers/defaults.c:326
 #, c-format
 msgid "value \"%s\" is invalid for option \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1127 plugins/sudoers/policy.c:205
-#: plugins/sudoers/policy.c:214
+#: plugins/sudoers/defaults.c:1176 plugins/sudoers/policy.c:213
+#: plugins/sudoers/policy.c:222
 #, c-format
 msgid "path name for \"%s\" too long"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1133
+#: plugins/sudoers/defaults.c:1182
 #, c-format
 msgid "values for \"%s\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1140
+#: plugins/sudoers/defaults.c:1189
 #, c-format
 msgid "values for \"%s\" must start with a '/'"
 msgstr ""
 
+#: plugins/sudoers/display.c:160
+#, c-format
+msgid "LDAP Role: %s\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:163
+#, c-format
+msgid "Sudoers entry: %s\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:166
+msgid "    RunAsUsers: "
+msgstr ""
+
+#: plugins/sudoers/display.c:181
+msgid "    RunAsGroups: "
+msgstr ""
+
+#: plugins/sudoers/display.c:191
+msgid "    Options: "
+msgstr ""
+
+#: plugins/sudoers/display.c:255
+msgid "    Commands:\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:478
+#, c-format
+msgid "Matching Defaults entries for %s on %s:\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:496
+#, c-format
+msgid "Runas and Command-specific defaults for %s:\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:514
+#, c-format
+msgid "User %s may run the following commands on %s:\n"
+msgstr ""
+
+#: plugins/sudoers/display.c:530
+#, c-format
+msgid "User %s is not allowed to run sudo on %s.\n"
+msgstr ""
+
 #: plugins/sudoers/editor.c:180
 #, c-format
 msgid "ignoring editor: %.*s"
@@ -2675,11 +2721,11 @@ msgstr ""
 msgid "sudo_putenv: corrupted envp, length mismatch"
 msgstr ""
 
-#: plugins/sudoers/env.c:1113
+#: plugins/sudoers/env.c:1119
 msgid "unable to rebuild the environment"
 msgstr ""
 
-#: plugins/sudoers/env.c:1192
+#: plugins/sudoers/env.c:1199
 #, c-format
 msgid ""
 "sorry, you are not allowed to set the following environment variables: %s"
@@ -2690,12 +2736,12 @@ msgstr ""
 msgid "unsupported digest type %u for %s"
 msgstr ""
 
-#: plugins/sudoers/filedigest.c:79
+#: plugins/sudoers/filedigest.c:77
 #, c-format
 msgid "%s: read error"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:169 plugins/sudoers/sssd.c:576
+#: plugins/sudoers/group_plugin.c:169 plugins/sudoers/sssd.c:578
 #, c-format
 msgid "unable to load %s: %s"
 msgstr ""
@@ -2724,37 +2770,37 @@ msgstr ""
 msgid "Local IP address and netmask pairs:\n"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:684
+#: plugins/sudoers/iolog.c:694
 msgid "unable to update sequence file"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:718 plugins/sudoers/iolog.c:906
-#: plugins/sudoers/iolog.c:1068 plugins/sudoers/iolog.c:1075
-#: plugins/sudoers/iolog.c:1196 plugins/sudoers/iolog.c:1203
-#: plugins/sudoers/iolog.c:1302 plugins/sudoers/iolog.c:1309
+#: plugins/sudoers/iolog.c:728 plugins/sudoers/iolog.c:917
+#: plugins/sudoers/iolog.c:1080 plugins/sudoers/iolog.c:1087
+#: plugins/sudoers/iolog.c:1209 plugins/sudoers/iolog.c:1216
+#: plugins/sudoers/iolog.c:1316 plugins/sudoers/iolog.c:1323
 #, c-format
 msgid "unable to write to I/O log file: %s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:726
+#: plugins/sudoers/iolog.c:736
 #, c-format
 msgid "unable to create %s/%s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:954
+#: plugins/sudoers/iolog.c:965
 #, c-format
 msgid "%s: internal error, I/O log file for event %d not open"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1053 plugins/sudoers/iolog.c:1181
-#: plugins/sudoers/iolog.c:1286 plugins/sudoers/timestamp.c:904
-#: plugins/sudoers/timestamp.c:996 plugins/sudoers/visudo.c:559
-#: plugins/sudoers/visudo.c:565
+#: plugins/sudoers/iolog.c:1065 plugins/sudoers/iolog.c:1194
+#: plugins/sudoers/iolog.c:1300 plugins/sudoers/timestamp.c:897
+#: plugins/sudoers/timestamp.c:989 plugins/sudoers/visudo.c:555
+#: plugins/sudoers/visudo.c:561
 msgid "unable to read the clock"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1278 plugins/sudoers/log_client.c:1200
-#: plugins/sudoers/log_client.c:1210 plugins/sudoers/log_client.c:1214
+#: plugins/sudoers/iolog.c:1292 plugins/sudoers/log_client.c:1203
+#: plugins/sudoers/log_client.c:1213 plugins/sudoers/log_client.c:1217
 #, c-format
 msgid "%s: internal error, invalid signal %d"
 msgstr ""
@@ -2763,28 +2809,28 @@ msgstr ""
 msgid "starttls not supported when using ldaps"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:225
+#: plugins/sudoers/ldap.c:226
 #, c-format
 msgid "unable to initialize SSL cert and key db: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:228
+#: plugins/sudoers/ldap.c:229
 #, c-format
 msgid "you must set TLS_CERT in %s to use SSL"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1587
+#: plugins/sudoers/ldap.c:1593
 #, c-format
 msgid "unable to initialize LDAP: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1624
+#: plugins/sudoers/ldap.c:1630
 msgid ""
 "start_tls specified but LDAP libs do not support ldap_start_tls_s() or "
 "ldap_start_tls_s_np()"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1761 plugins/sudoers/parse_ldif.c:748
+#: plugins/sudoers/ldap.c:1767 plugins/sudoers/parse_ldif.c:745
 #, c-format
 msgid "invalid sudoOrder attribute: %s"
 msgstr ""
@@ -2820,12 +2866,12 @@ msgstr ""
 msgid "unable to open audit system"
 msgstr ""
 
-#: plugins/sudoers/linux_audit.c:103
+#: plugins/sudoers/linux_audit.c:104
 msgid "unable to send audit message"
 msgstr ""
 
 #: plugins/sudoers/log_client.c:125 plugins/sudoers/log_client.c:412
-#: plugins/sudoers/log_client.c:1447 plugins/sudoers/log_client.c:2069
+#: plugins/sudoers/log_client.c:1450 plugins/sudoers/log_client.c:2076
 msgid "error in event loop"
 msgstr ""
 
@@ -2867,547 +2913,503 @@ msgstr ""
 msgid "TLS handshake was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1218
+#: plugins/sudoers/log_client.c:1221
 #, c-format
 msgid "%s: internal error, invalid exit status %d"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1753 plugins/sudoers/log_client.c:1777
+#: plugins/sudoers/log_client.c:1757 plugins/sudoers/log_client.c:1782
 msgid "lost connection to log server"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1854
+#: plugins/sudoers/log_client.c:1859
 msgid "missing write buffer"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:2008
+#: plugins/sudoers/log_client.c:2015
 msgid "unable to connect to log server"
 msgstr ""
 
-#: plugins/sudoers/logging.c:290
+#: plugins/sudoers/logging.c:295
 msgid "user NOT in sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:292
+#: plugins/sudoers/logging.c:297
 msgid "user NOT authorized on host"
 msgstr ""
 
-#: plugins/sudoers/logging.c:294
+#: plugins/sudoers/logging.c:299
 msgid "command not allowed"
 msgstr ""
 
-#: plugins/sudoers/logging.c:315
+#: plugins/sudoers/logging.c:320
 #, c-format
 msgid "%s is not in the sudoers file.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:318
+#: plugins/sudoers/logging.c:323
 #, c-format
 msgid "%s is not allowed to run sudo on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:321
+#: plugins/sudoers/logging.c:326
 #, c-format
 msgid "Sorry, user %s may not run sudo on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:324
+#: plugins/sudoers/logging.c:339
 #, c-format
 msgid "Sorry, user %s is not allowed to execute '%s%s%s%s' as %s%s%s on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:334
+#: plugins/sudoers/logging.c:350
 msgid "This incident has been reported to the administrator.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:369 plugins/sudoers/sudoers.c:566
-#: plugins/sudoers/sudoers.c:567 plugins/sudoers/sudoers.c:569
-#: plugins/sudoers/sudoers.c:570 plugins/sudoers/sudoers.c:791
-#: plugins/sudoers/sudoers.c:793
+#: plugins/sudoers/logging.c:387 plugins/sudoers/sudoers.c:547
+#: plugins/sudoers/sudoers.c:549 plugins/sudoers/sudoers.c:551
+#: plugins/sudoers/sudoers.c:553 plugins/sudoers/sudoers.c:777
+#: plugins/sudoers/sudoers.c:779
 #, c-format
 msgid "%s: command not found"
 msgstr ""
 
-#: plugins/sudoers/logging.c:371 plugins/sudoers/sudoers.c:562
+#: plugins/sudoers/logging.c:389 plugins/sudoers/sudoers.c:543
 #, c-format
 msgid ""
 "ignoring \"%s\" found in '.'\n"
 "Use \"sudo ./%s\" if this is the \"%s\" you wish to run."
 msgstr ""
 
-#: plugins/sudoers/logging.c:391
+#: plugins/sudoers/logging.c:409
 #, c-format
 msgid "%u incorrect password attempt"
 msgid_plural "%u incorrect password attempts"
 msgstr[0] ""
 msgstr[1] ""
 
-#: plugins/sudoers/logging.c:481
+#: plugins/sudoers/logging.c:500
 msgid "authentication failure"
 msgstr ""
 
-#: plugins/sudoers/logging.c:520 plugins/sudoers/logging.c:539
+#: plugins/sudoers/logging.c:539 plugins/sudoers/logging.c:558
 msgid "a password is required"
 msgstr ""
 
-#: plugins/sudoers/logging.c:855
+#: plugins/sudoers/logging.c:881
 msgid "problem parsing sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:896 plugins/sudoers/logging.c:904
+#: plugins/sudoers/logging.c:922 plugins/sudoers/logging.c:930
 #, c-format
 msgid "%s:%d:%d: %s"
 msgstr ""
 
-#: plugins/sudoers/logging.c:1079
+#: plugins/sudoers/logging.c:1108
 #, c-format
-msgid "unable to write log file: %s"
+msgid "unable to write log file %s"
 msgstr ""
 
-#: plugins/sudoers/match_digest.c:101
+#: plugins/sudoers/match_digest.c:107
 #, c-format
 msgid "digest for %s (%s) bad length %zu, expected %zu"
 msgstr ""
 
-#: plugins/sudoers/match_digest.c:120
+#: plugins/sudoers/match_digest.c:126
 #, c-format
 msgid "digest for %s (%s) is not in %s form"
 msgstr ""
 
-#: plugins/sudoers/parse.c:643
-#, c-format
-msgid ""
-"\n"
-"LDAP Role: %s\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:646
-msgid ""
-"\n"
-"Sudoers entry:\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:648
-msgid "    RunAsUsers: "
-msgstr ""
-
-#: plugins/sudoers/parse.c:663
-msgid "    RunAsGroups: "
-msgstr ""
-
-#: plugins/sudoers/parse.c:673
-msgid "    Options: "
-msgstr ""
-
-#: plugins/sudoers/parse.c:737
-msgid "    Commands:\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:928
-#, c-format
-msgid "Matching Defaults entries for %s on %s:\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:946
-#, c-format
-msgid "Runas and Command-specific defaults for %s:\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:964
-#, c-format
-msgid "User %s may run the following commands on %s:\n"
-msgstr ""
-
-#: plugins/sudoers/parse.c:979
-#, c-format
-msgid "User %s is not allowed to run sudo on %s.\n"
-msgstr ""
-
-#: plugins/sudoers/parse_ldif.c:618
+#: plugins/sudoers/parse_ldif.c:615
 #, c-format
 msgid "ignoring incomplete sudoRole: cn: %s"
 msgstr ""
 
-#: plugins/sudoers/parse_ldif.c:678
+#: plugins/sudoers/parse_ldif.c:675
 #, c-format
 msgid "invalid LDIF attribute: %s"
 msgstr ""
 
-#: plugins/sudoers/pivot.c:74
+#: plugins/sudoers/parser_warnx.c:56
+#, c-format
+msgid "%s:%d:%d: %s\n"
+msgstr ""
+
+#: plugins/sudoers/parser_warnx.c:59
+#, c-format
+msgid "%s: %s\n"
+msgstr ""
+
+#: plugins/sudoers/pivot.c:71
 msgid "unable to restore root directory"
 msgstr ""
 
-#: plugins/sudoers/pivot.c:82
+#: plugins/sudoers/pivot.c:79
 msgid "unable to restore current working directory"
 msgstr ""
 
-#: plugins/sudoers/policy.c:80 plugins/sudoers/policy.c:111
+#: plugins/sudoers/policy.c:78 plugins/sudoers/policy.c:111
 #, c-format
 msgid "invalid %.*s set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:356 plugins/sudoers/testsudoers.c:277
+#: plugins/sudoers/policy.c:364 plugins/sudoers/testsudoers.c:329
 msgid "unable to parse network address list"
 msgstr ""
 
-#: plugins/sudoers/policy.c:524
+#: plugins/sudoers/policy.c:556
 msgid "user name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:528
+#: plugins/sudoers/policy.c:560
 msgid "user-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:532
+#: plugins/sudoers/policy.c:564
 msgid "group-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:536
+#: plugins/sudoers/policy.c:568
 msgid "host name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:754
+#: plugins/sudoers/policy.c:757
 #, c-format
 msgid "invalid working directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:938
+#: plugins/sudoers/policy.c:944
 #, c-format
 msgid "invalid chroot directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1125 plugins/sudoers/visudo.c:910
-#: plugins/sudoers/visudo.c:1209
+#: plugins/sudoers/policy.c:1153 plugins/sudoers/visudo.c:919
+#: plugins/sudoers/visudo.c:1218
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1195 plugins/sudoers/policy.c:1230
-#: plugins/sudoers/policy.c:1252 plugins/sudoers/policy.c:1274
+#: plugins/sudoers/policy.c:1225 plugins/sudoers/policy.c:1260
+#: plugins/sudoers/policy.c:1282 plugins/sudoers/policy.c:1300
 #, c-format
 msgid "%s: invalid mode flags from sudo front end: 0x%x"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1294
+#: plugins/sudoers/policy.c:1323
 #, c-format
 msgid "Sudoers policy plugin version %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1296
+#: plugins/sudoers/policy.c:1325
 #, c-format
 msgid "Sudoers file grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1300
+#: plugins/sudoers/policy.c:1329
 #, c-format
 msgid ""
 "\n"
 "Sudoers path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1303
+#: plugins/sudoers/policy.c:1332
 #, c-format
 msgid "nsswitch path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1305
+#: plugins/sudoers/policy.c:1335
 #, c-format
 msgid "ldap.conf path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1306
+#: plugins/sudoers/policy.c:1337
 #, c-format
 msgid "ldap.secret path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1339
+#: plugins/sudoers/policy.c:1370
 #, c-format
 msgid "unable to register hook of type %d (version %d.%d)"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1357
+#: plugins/sudoers/policy.c:1388
 #, c-format
 msgid "unable to deregister hook of type %d (version %d.%d)"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:222 plugins/sudoers/pwutil.c:240
+#: plugins/sudoers/pwutil.c:242 plugins/sudoers/pwutil.c:260
 #, c-format
 msgid "unable to cache uid %u"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:234
+#: plugins/sudoers/pwutil.c:254
 #, c-format
 msgid "unable to cache uid %u, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:294 plugins/sudoers/pwutil.c:312
-#: plugins/sudoers/pwutil.c:375 plugins/sudoers/pwutil.c:420
+#: plugins/sudoers/pwutil.c:314 plugins/sudoers/pwutil.c:332
+#: plugins/sudoers/pwutil.c:395 plugins/sudoers/pwutil.c:440
 #, c-format
 msgid "unable to cache user %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:307
+#: plugins/sudoers/pwutil.c:327
 #, c-format
 msgid "unable to cache user %s, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:539 plugins/sudoers/pwutil.c:557
+#: plugins/sudoers/pwutil.c:559 plugins/sudoers/pwutil.c:577
 #, c-format
 msgid "unable to cache gid %u"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:551
+#: plugins/sudoers/pwutil.c:571
 #, c-format
 msgid "unable to cache gid %u, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:605 plugins/sudoers/pwutil.c:623
-#: plugins/sudoers/pwutil.c:684 plugins/sudoers/pwutil.c:733
+#: plugins/sudoers/pwutil.c:625 plugins/sudoers/pwutil.c:643
+#: plugins/sudoers/pwutil.c:704 plugins/sudoers/pwutil.c:753
 #, c-format
 msgid "unable to cache group %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:618
+#: plugins/sudoers/pwutil.c:638
 #, c-format
 msgid "unable to cache group %s, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:880 plugins/sudoers/pwutil.c:963
-#: plugins/sudoers/pwutil.c:1017 plugins/sudoers/pwutil.c:1071
+#: plugins/sudoers/pwutil.c:900 plugins/sudoers/pwutil.c:985
+#: plugins/sudoers/pwutil.c:1039 plugins/sudoers/pwutil.c:1095
 #, c-format
 msgid "unable to cache group list for %s, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:886 plugins/sudoers/pwutil.c:968
-#: plugins/sudoers/pwutil.c:1023 plugins/sudoers/pwutil.c:1076
+#: plugins/sudoers/pwutil.c:906 plugins/sudoers/pwutil.c:990
+#: plugins/sudoers/pwutil.c:1045 plugins/sudoers/pwutil.c:1100
 #, c-format
 msgid "unable to cache group list for %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:957
+#: plugins/sudoers/pwutil.c:979
 #, c-format
 msgid "unable to parse groups for %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:1065
+#: plugins/sudoers/pwutil.c:1089
 #, c-format
 msgid "unable to parse gids for %s"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:115 plugins/sudoers/set_perms.c:451
-#: plugins/sudoers/set_perms.c:863 plugins/sudoers/set_perms.c:1178
-#: plugins/sudoers/set_perms.c:1481
+#: plugins/sudoers/set_perms.c:120 plugins/sudoers/set_perms.c:457
+#: plugins/sudoers/set_perms.c:870 plugins/sudoers/set_perms.c:1186
+#: plugins/sudoers/set_perms.c:1490
 msgid "perm stack overflow"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:126 plugins/sudoers/set_perms.c:382
-#: plugins/sudoers/set_perms.c:462 plugins/sudoers/set_perms.c:730
-#: plugins/sudoers/set_perms.c:874 plugins/sudoers/set_perms.c:1102
-#: plugins/sudoers/set_perms.c:1189 plugins/sudoers/set_perms.c:1414
-#: plugins/sudoers/set_perms.c:1492 plugins/sudoers/set_perms.c:1583
+#: plugins/sudoers/set_perms.c:131 plugins/sudoers/set_perms.c:387
+#: plugins/sudoers/set_perms.c:468 plugins/sudoers/set_perms.c:736
+#: plugins/sudoers/set_perms.c:881 plugins/sudoers/set_perms.c:1109
+#: plugins/sudoers/set_perms.c:1197 plugins/sudoers/set_perms.c:1422
+#: plugins/sudoers/set_perms.c:1501 plugins/sudoers/set_perms.c:1592
 msgid "perm stack underflow"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:186 plugins/sudoers/set_perms.c:509
-#: plugins/sudoers/set_perms.c:1243 plugins/sudoers/set_perms.c:1526
+#: plugins/sudoers/set_perms.c:191 plugins/sudoers/set_perms.c:515
+#: plugins/sudoers/set_perms.c:1251 plugins/sudoers/set_perms.c:1535
 msgid "unable to change to root gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:277 plugins/sudoers/set_perms.c:606
-#: plugins/sudoers/set_perms.c:1006 plugins/sudoers/set_perms.c:1320
+#: plugins/sudoers/set_perms.c:282 plugins/sudoers/set_perms.c:612
+#: plugins/sudoers/set_perms.c:1013 plugins/sudoers/set_perms.c:1328
 msgid "unable to change to runas gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:282 plugins/sudoers/set_perms.c:611
-#: plugins/sudoers/set_perms.c:1011 plugins/sudoers/set_perms.c:1325
+#: plugins/sudoers/set_perms.c:287 plugins/sudoers/set_perms.c:617
+#: plugins/sudoers/set_perms.c:1018 plugins/sudoers/set_perms.c:1333
 msgid "unable to set runas group vector"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:293 plugins/sudoers/set_perms.c:622
-#: plugins/sudoers/set_perms.c:1020 plugins/sudoers/set_perms.c:1334
+#: plugins/sudoers/set_perms.c:298 plugins/sudoers/set_perms.c:628
+#: plugins/sudoers/set_perms.c:1027 plugins/sudoers/set_perms.c:1342
 msgid "unable to change to runas uid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:315 plugins/sudoers/set_perms.c:644
-#: plugins/sudoers/set_perms.c:1040 plugins/sudoers/set_perms.c:1354
+#: plugins/sudoers/set_perms.c:320 plugins/sudoers/set_perms.c:650
+#: plugins/sudoers/set_perms.c:1047 plugins/sudoers/set_perms.c:1362
 msgid "unable to change to sudoers gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:369 plugins/sudoers/set_perms.c:717
-#: plugins/sudoers/set_perms.c:1089 plugins/sudoers/set_perms.c:1401
-#: plugins/sudoers/set_perms.c:1570
+#: plugins/sudoers/set_perms.c:374 plugins/sudoers/set_perms.c:723
+#: plugins/sudoers/set_perms.c:1096 plugins/sudoers/set_perms.c:1409
+#: plugins/sudoers/set_perms.c:1579
 msgid "too many processes"
 msgstr ""
 
-#: plugins/sudoers/solaris_audit.c:61
+#: plugins/sudoers/solaris_audit.c:62
 msgid "unable to get current working directory"
 msgstr ""
 
-#: plugins/sudoers/solaris_audit.c:69
+#: plugins/sudoers/solaris_audit.c:70
 #, c-format
-msgid "truncated audit path user_cmnd: %s"
+msgid "truncated audit path ctx->user.cmnd: %s"
 msgstr ""
 
-#: plugins/sudoers/solaris_audit.c:76
+#: plugins/sudoers/solaris_audit.c:77
 #, c-format
 msgid "truncated audit path argv[0]: %s"
 msgstr ""
 
-#: plugins/sudoers/sssd.c:579
+#: plugins/sudoers/sssd.c:581
 msgid "unable to initialize SSS source. Is SSSD installed on your machine?"
 msgstr ""
 
-#: plugins/sudoers/sssd.c:587 plugins/sudoers/sssd.c:596
-#: plugins/sudoers/sssd.c:605 plugins/sudoers/sssd.c:614
-#: plugins/sudoers/sssd.c:623
+#: plugins/sudoers/sssd.c:589 plugins/sudoers/sssd.c:598
+#: plugins/sudoers/sssd.c:607 plugins/sudoers/sssd.c:616
+#: plugins/sudoers/sssd.c:625
 #, c-format
 msgid "unable to find symbol \"%s\" in %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:261
+#: plugins/sudoers/sudoers.c:250
 #, c-format
 msgid "unable to get defaults from %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:268
+#: plugins/sudoers/sudoers.c:259
 msgid "no valid sudoers sources found, quitting"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:344
-#, c-format
-msgid "user not allowed to change root directory to %s"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:346
-#, c-format
-msgid "you are not permitted to use the -R option with %s"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:371
-#, c-format
-msgid "user not allowed to change directory to %s"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:372
-#, c-format
-msgid "you are not permitted to use the -D option with %s"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:412
+#: plugins/sudoers/sudoers.c:366
 msgid "sudoers specifies that root is not allowed to sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:421
+#: plugins/sudoers/sudoers.c:375
 msgid "user not allowed to override closefrom limit"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:422
+#: plugins/sudoers/sudoers.c:376
 msgid "you are not permitted to use the -C option"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:468
+#: plugins/sudoers/sudoers.c:440
 msgid "no tty"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:469
+#: plugins/sudoers/sudoers.c:441
 msgid "sorry, you must have a tty to run sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:477
+#: plugins/sudoers/sudoers.c:449
 #, c-format
 msgid "invalid shell for user %s: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:561
+#: plugins/sudoers/sudoers.c:491
+#, c-format
+msgid "user not allowed to change root directory to %s"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:493
+#, c-format
+msgid "you are not permitted to use the -R option with %s"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:506
+#, c-format
+msgid "user not allowed to change directory to %s"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:507
+#, c-format
+msgid "you are not permitted to use the -D option with %s"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:542
 msgid "command in current directory"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:574
+#: plugins/sudoers/sudoers.c:557
 msgid "\"cd\" is a shell built-in command, it cannot be run directly."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:576
+#: plugins/sudoers/sudoers.c:559
 msgid "the -s option may be used to run a privileged shell."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:578
+#: plugins/sudoers/sudoers.c:561
 msgid "the -D option may be used to run a command in a specific directory."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:587
+#: plugins/sudoers/sudoers.c:570
 msgid "user not allowed to set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:589
+#: plugins/sudoers/sudoers.c:572
 msgid "sorry, you are not allowed set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:597
+#: plugins/sudoers/sudoers.c:580
 msgid "user not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:599
+#: plugins/sudoers/sudoers.c:582
 msgid "sorry, you are not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:635
+#: plugins/sudoers/sudoers.c:618
 msgid "no command specified"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:774
+#: plugins/sudoers/sudoers.c:759
 msgid "error setting user-specified environment variables"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1239
+#: plugins/sudoers/sudoers.c:1211
 msgid "sudoedit doesn't need to be run via sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1314 plugins/sudoers/sudoreplay.c:1612
+#: plugins/sudoers/sudoers.c:1296 plugins/sudoers/sudoreplay.c:1613
 #: plugins/sudoers/tsdump.c:138
 #, c-format
 msgid "unable to read %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1337 plugins/sudoers/visudo.c:1114
+#: plugins/sudoers/sudoers.c:1321 plugins/sudoers/visudo.c:1123
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1341 plugins/sudoers/timestamp.c:288 toke.l:1325
+#: plugins/sudoers/sudoers.c:1325 plugins/sudoers/timestamp.c:272 toke.l:1355
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1345 plugins/sudoers/timestamp.c:295 toke.l:1330
+#: plugins/sudoers/sudoers.c:1330 plugins/sudoers/timestamp.c:279 toke.l:1360
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1349 plugins/sudoers/timestamp.c:300 toke.l:1333
+#: plugins/sudoers/sudoers.c:1334 plugins/sudoers/timestamp.c:284 toke.l:1363
 #, c-format
 msgid "%s is owned by gid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1377
+#: plugins/sudoers/sudoers.c:1363
 #, c-format
 msgid "only root can use \"-c %s\""
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1396
+#: plugins/sudoers/sudoers.c:1382
 #, c-format
 msgid "unknown login class %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1483 plugins/sudoers/sudoers.c:1498
+#: plugins/sudoers/sudoers_cb.c:120 plugins/sudoers/sudoers_cb.c:135
 #, c-format
 msgid "unable to resolve host %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1636
-#, c-format
-msgid "%s:%d:%d timestampowner: unknown user %s"
-msgstr ""
-
 #: plugins/sudoers/sudoreplay.c:252
 #, c-format
 msgid "invalid filter option: %s"
@@ -3448,7 +3450,7 @@ msgid "unable to set tty to raw mode"
 msgstr ""
 
 #: plugins/sudoers/sudoreplay.c:685
-msgid "Warning: your terminal is too small to properly replay the log.\n"
+msgid "Warning: your terminal is too small to properly replay the log."
 msgstr ""
 
 #: plugins/sudoers/sudoreplay.c:686
@@ -3460,65 +3462,65 @@ msgstr ""
 msgid "Replay finished, press any key to restore the terminal."
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1216 plugins/sudoers/sudoreplay.c:1246
+#: plugins/sudoers/sudoreplay.c:1217 plugins/sudoers/sudoreplay.c:1247
 #, c-format
 msgid "ambiguous expression \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1268
+#: plugins/sudoers/sudoreplay.c:1269
 msgid "unmatched ')' in expression"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1272
+#: plugins/sudoers/sudoreplay.c:1273
 #, c-format
 msgid "unknown search term \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1287
+#: plugins/sudoers/sudoreplay.c:1288
 #, c-format
 msgid "%s requires an argument"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1297
+#: plugins/sudoers/sudoreplay.c:1298
 #, c-format
 msgid "could not parse date \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1306
+#: plugins/sudoers/sudoreplay.c:1307
 msgid "unmatched '(' in expression"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1308
+#: plugins/sudoers/sudoreplay.c:1309
 msgid "illegal trailing \"or\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1310
+#: plugins/sudoers/sudoreplay.c:1311
 msgid "illegal trailing \"!\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1416
+#: plugins/sudoers/sudoreplay.c:1417
 #, c-format
 msgid "unknown search type %d"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1678
+#: plugins/sudoers/sudoreplay.c:1679
 #, c-format
 msgid "usage: %s [-hnRS] [-d dir] [-m num] [-s num] ID\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1680
+#: plugins/sudoers/sudoreplay.c:1681
 #, c-format
 msgid "usage: %s [-h] [-d dir] -l [search expression]\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1694
+#: plugins/sudoers/sudoreplay.c:1695
 #, c-format
 msgid ""
 "%s - replay sudo session logs\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1696
+#: plugins/sudoers/sudoreplay.c:1697
 msgid ""
 "\n"
 "Options:\n"
@@ -3535,38 +3537,53 @@ msgid ""
 "  -V, --version          display version information and exit"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:355
-msgid "\thost  unmatched"
+#: plugins/sudoers/testsudoers.c:392
+#, c-format
+msgid ""
+"\n"
+"Invalid shell for user %s: %s\n"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:358
+#: plugins/sudoers/testsudoers.c:411
+msgid ""
+"\n"
+"Password required"
+msgstr ""
+
+#: plugins/sudoers/testsudoers.c:422
+msgid ""
+"\n"
+"Parse error"
+msgstr ""
+
+#: plugins/sudoers/testsudoers.c:425
 msgid ""
 "\n"
 "Command allowed"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:359
+#: plugins/sudoers/testsudoers.c:428
 msgid ""
 "\n"
 "Command denied"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:359
+#: plugins/sudoers/testsudoers.c:431
 msgid ""
 "\n"
 "Command unmatched"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:379 plugins/sudoers/timestamp.c:718
+#: plugins/sudoers/timestamp.c:364 plugins/sudoers/timestamp.c:711
 #, c-format
 msgid "unable to truncate time stamp file to %lld bytes"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:915
+#: plugins/sudoers/timestamp.c:908
 msgid "ignoring time stamp from the future"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:938
+#: plugins/sudoers/timestamp.c:931
 #, c-format
 msgid "time stamp too far in the future: %20.20s"
 msgstr ""
@@ -3576,95 +3593,100 @@ msgstr ""
 msgid "unable to lock time stamp file %s"
 msgstr ""
 
-#: plugins/sudoers/toke_util.c:156
+#: plugins/sudoers/timestamp.c:1114
+#, c-format
+msgid "%s:%d:%d timestampowner: unknown user %s"
+msgstr ""
+
+#: plugins/sudoers/toke_util.c:159
 msgid "sudoedit should not be specified with a path"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:314 plugins/sudoers/visudo.c:705
+#: plugins/sudoers/visudo.c:308 plugins/sudoers/visudo.c:714
 #, c-format
 msgid "press return to edit %s: "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:329
+#: plugins/sudoers/visudo.c:323
 #, c-format
 msgid "contents of edit session left in %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:406
+#: plugins/sudoers/visudo.c:401
 #, c-format
 msgid "specified editor (%s) doesn't exist"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:411
+#: plugins/sudoers/visudo.c:406
 #, c-format
 msgid "no editor found (editor path = %s)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:498 plugins/sudoers/visudo.c:777
+#: plugins/sudoers/visudo.c:494 plugins/sudoers/visudo.c:786
 #, c-format
 msgid "unable to stat %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:518 plugins/sudoers/visudo.c:526
+#: plugins/sudoers/visudo.c:514 plugins/sudoers/visudo.c:522
 msgid "write error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:572
+#: plugins/sudoers/visudo.c:568
 #, c-format
 msgid "unable to stat temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:579
+#: plugins/sudoers/visudo.c:575
 #, c-format
 msgid "zero length temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:585
+#: plugins/sudoers/visudo.c:581
 #, c-format
 msgid "editor (%s) failed, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:607
+#: plugins/sudoers/visudo.c:613
 #, c-format
 msgid "%s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:652
+#: plugins/sudoers/visudo.c:661
 #, c-format
 msgid "unable to re-open temporary file (%s), %s unchanged."
 msgstr ""
 
-#: plugins/sudoers/visudo.c:665
+#: plugins/sudoers/visudo.c:674
 #, c-format
 msgid "unable to parse temporary file (%s), unknown error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:751 plugins/sudoers/visudo.c:781
-#: plugins/sudoers/visudo.c:788
+#: plugins/sudoers/visudo.c:760 plugins/sudoers/visudo.c:790
+#: plugins/sudoers/visudo.c:797
 #, c-format
 msgid "unable to set (uid, gid) of %s to (%u, %u)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:816
+#: plugins/sudoers/visudo.c:825
 #, c-format
 msgid "%s and %s not on the same file system, using mv to rename"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:827
+#: plugins/sudoers/visudo.c:836
 #, c-format
 msgid "command failed: '%s %s %s', %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:834
+#: plugins/sudoers/visudo.c:843
 #, c-format
 msgid "error renaming %s, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:855
+#: plugins/sudoers/visudo.c:864
 msgid "What now? "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:869
+#: plugins/sudoers/visudo.c:878
 msgid ""
 "Options are:\n"
 "  (e)dit sudoers file again\n"
@@ -3672,56 +3694,56 @@ msgid ""
 "  (Q)uit and save changes to sudoers file (DANGER!)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:915
+#: plugins/sudoers/visudo.c:923
 #, c-format
 msgid "unable to run %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:946
+#: plugins/sudoers/visudo.c:954
 #, c-format
 msgid "%s: wrong owner (uid, gid) should be (%u, %u)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:957
+#: plugins/sudoers/visudo.c:965
 #, c-format
 msgid "%s: bad permissions, should be mode 0%o\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1009 plugins/sudoers/visudo.c:1016
+#: plugins/sudoers/visudo.c:1017 plugins/sudoers/visudo.c:1024
 #, c-format
 msgid "%s: parsed OK\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1035
+#: plugins/sudoers/visudo.c:1043
 #, c-format
 msgid "%s busy, try again later"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1039
+#: plugins/sudoers/visudo.c:1047
 msgid "Edit anyway? [y/N]"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1197
+#: plugins/sudoers/visudo.c:1206
 msgid "the -x option will be removed in a future release"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1199
+#: plugins/sudoers/visudo.c:1208
 msgid "please consider using the cvtsudoers utility instead"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1219
+#: plugins/sudoers/visudo.c:1228
 #, c-format
 msgid "Warning: %s:%d:%d: unused %s \"%s\""
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1332
+#: plugins/sudoers/visudo.c:1341
 #, c-format
 msgid ""
 "%s - safely edit the sudoers file\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1334
+#: plugins/sudoers/visudo.c:1343
 msgid ""
 "\n"
 "Options:\n"
@@ -3762,14 +3784,14 @@ msgstr ""
 msgid "unexpected line break in string"
 msgstr ""
 
-#: toke.l:983
+#: toke.l:982
 msgid "ignoring editor backup file"
 msgstr ""
 
-#: toke.l:986
+#: toke.l:985
 msgid "ignoring file name containing '.'"
 msgstr ""
 
-#: toke.l:1289
+#: toke.l:1310
 msgid "too many levels of includes"
 msgstr ""
diff --git a/po/sudo.pot b/po/sudo.pot
index 5734b57ee..5e1e03ed8 100644
--- a/po/sudo.pot
+++ b/po/sudo.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.14\n"
+"Project-Id-Version: sudo 1.9.15\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2023-06-07 13:27-0600\n"
+"POT-Creation-Date: 2023-10-19 10:02-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -32,39 +32,39 @@ msgstr ""
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/gidlist.c:76
 #: lib/util/json.c:55 lib/util/json.c:197 lib/util/sudo_conf.c:215
 #: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:647
-#: src/conversation.c:78 src/exec_iolog.c:122 src/exec_iolog.c:133
-#: src/exec_iolog.c:210 src/exec_monitor.c:171 src/exec_monitor.c:418
-#: src/exec_monitor.c:424 src/exec_monitor.c:432 src/exec_monitor.c:440
-#: src/exec_monitor.c:447 src/exec_monitor.c:454 src/exec_monitor.c:461
-#: src/exec_monitor.c:468 src/exec_monitor.c:475 src/exec_monitor.c:482
-#: src/exec_monitor.c:489 src/exec_nopty.c:231 src/exec_nopty.c:240
+#: src/conversation.c:81 src/exec_iolog.c:122 src/exec_iolog.c:133
+#: src/exec_iolog.c:210 src/exec_monitor.c:171 src/exec_monitor.c:428
+#: src/exec_monitor.c:434 src/exec_monitor.c:442 src/exec_monitor.c:450
+#: src/exec_monitor.c:457 src/exec_monitor.c:464 src/exec_monitor.c:471
+#: src/exec_monitor.c:478 src/exec_monitor.c:485 src/exec_monitor.c:492
+#: src/exec_monitor.c:499 src/exec_nopty.c:231 src/exec_nopty.c:240
 #: src/exec_nopty.c:247 src/exec_nopty.c:254 src/exec_nopty.c:261
 #: src/exec_nopty.c:268 src/exec_nopty.c:275 src/exec_nopty.c:282
 #: src/exec_nopty.c:289 src/exec_nopty.c:296 src/exec_nopty.c:303
 #: src/exec_nopty.c:310 src/exec_nopty.c:318 src/exec_nopty.c:326
-#: src/exec_nopty.c:744 src/exec_preload.c:343 src/exec_ptrace.c:475
-#: src/exec_ptrace.c:768 src/exec_ptrace.c:983 src/exec_ptrace.c:1096
-#: src/exec_ptrace.c:1271 src/exec_ptrace.c:1624 src/exec_ptrace.c:1651
-#: src/exec_ptrace.c:1841 src/exec_pty.c:581 src/exec_pty.c:765
-#: src/exec_pty.c:963 src/exec_pty.c:972 src/exec_pty.c:979 src/exec_pty.c:986
-#: src/exec_pty.c:993 src/exec_pty.c:1000 src/exec_pty.c:1007
-#: src/exec_pty.c:1014 src/exec_pty.c:1021 src/exec_pty.c:1028
-#: src/exec_pty.c:1035 src/exec_pty.c:1042 src/exec_pty.c:1050
-#: src/load_plugins.c:100 src/load_plugins.c:125 src/load_plugins.c:161
-#: src/load_plugins.c:394 src/load_plugins.c:400 src/parse_args.c:172
-#: src/parse_args.c:193 src/parse_args.c:269 src/parse_args.c:625
-#: src/parse_args.c:647 src/parse_args.c:672 src/preserve_fds.c:46
-#: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
-#: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:240
-#: src/sesh.c:246 src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:644
-#: src/sudo.c:709 src/sudo.c:719 src/sudo.c:746 src/sudo.c:769 src/sudo.c:778
-#: src/sudo.c:787 src/sudo.c:805 src/sudo.c:846 src/sudo.c:855 src/sudo.c:865
-#: src/sudo.c:898 src/sudo.c:1127 src/sudo.c:1148 src/sudo.c:1441
-#: src/sudo.c:1610 src/sudo.c:1837 src/sudo.c:2171 src/sudo_edit.c:89
-#: src/sudo_edit.c:149 src/sudo_edit.c:430 src/sudo_edit.c:439
-#: src/sudo_edit.c:540 src/sudo_edit.c:547 src/sudo_edit.c:692
-#: src/sudo_edit.c:712 src/sudo_intercept_common.c:115
-#: src/sudo_intercept_common.c:340
+#: src/exec_nopty.c:748 src/exec_preload.c:347 src/exec_ptrace.c:475
+#: src/exec_ptrace.c:768 src/exec_ptrace.c:984 src/exec_ptrace.c:1097
+#: src/exec_ptrace.c:1272 src/exec_ptrace.c:1625 src/exec_ptrace.c:1652
+#: src/exec_ptrace.c:1844 src/exec_pty.c:554 src/exec_pty.c:738
+#: src/exec_pty.c:936 src/exec_pty.c:945 src/exec_pty.c:952 src/exec_pty.c:959
+#: src/exec_pty.c:966 src/exec_pty.c:973 src/exec_pty.c:980 src/exec_pty.c:987
+#: src/exec_pty.c:994 src/exec_pty.c:1001 src/exec_pty.c:1008
+#: src/exec_pty.c:1015 src/exec_pty.c:1023 src/load_plugins.c:100
+#: src/load_plugins.c:125 src/load_plugins.c:161 src/load_plugins.c:394
+#: src/load_plugins.c:400 src/parse_args.c:172 src/parse_args.c:193
+#: src/parse_args.c:269 src/parse_args.c:625 src/parse_args.c:647
+#: src/parse_args.c:672 src/preserve_fds.c:46 src/preserve_fds.c:131
+#: src/selinux.c:89 src/selinux.c:362 src/selinux.c:472 src/selinux.c:489
+#: src/selinux.c:496 src/sesh.c:206 src/sesh.c:240 src/sesh.c:246
+#: src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:579 src/sudo.c:605
+#: src/sudo.c:655 src/sudo.c:721 src/sudo.c:732 src/sudo.c:759 src/sudo.c:782
+#: src/sudo.c:791 src/sudo.c:800 src/sudo.c:813 src/sudo.c:822 src/sudo.c:863
+#: src/sudo.c:873 src/sudo.c:883 src/sudo.c:916 src/sudo.c:918 src/sudo.c:1145
+#: src/sudo.c:1166 src/sudo.c:1457 src/sudo.c:1626 src/sudo.c:1853
+#: src/sudo.c:2186 src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:430
+#: src/sudo_edit.c:439 src/sudo_edit.c:540 src/sudo_edit.c:547
+#: src/sudo_edit.c:692 src/sudo_edit.c:712 src/sudo_intercept_common.c:122
+#: src/sudo_intercept_common.c:347
 #, c-format
 msgid "%s: %s"
 msgstr ""
@@ -72,36 +72,37 @@ msgstr ""
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/json.c:56
 #: lib/util/json.c:198 lib/util/regex.c:173 lib/util/sudo_conf.c:216
 #: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:647
-#: src/conversation.c:79 src/exec_intercept.c:111 src/exec_intercept.c:350
-#: src/exec_intercept.c:525 src/exec_intercept.c:589 src/exec_intercept.c:713
-#: src/exec_intercept.c:837 src/exec_iolog.c:122 src/exec_iolog.c:133
-#: src/exec_iolog.c:210 src/exec_monitor.c:418 src/exec_monitor.c:424
-#: src/exec_monitor.c:432 src/exec_monitor.c:440 src/exec_monitor.c:447
-#: src/exec_monitor.c:454 src/exec_monitor.c:461 src/exec_monitor.c:468
-#: src/exec_monitor.c:475 src/exec_monitor.c:482 src/exec_monitor.c:489
+#: src/conversation.c:82 src/exec_intercept.c:112 src/exec_intercept.c:351
+#: src/exec_intercept.c:527 src/exec_intercept.c:591 src/exec_intercept.c:715
+#: src/exec_intercept.c:839 src/exec_iolog.c:122 src/exec_iolog.c:133
+#: src/exec_iolog.c:210 src/exec_monitor.c:428 src/exec_monitor.c:434
+#: src/exec_monitor.c:442 src/exec_monitor.c:450 src/exec_monitor.c:457
+#: src/exec_monitor.c:464 src/exec_monitor.c:471 src/exec_monitor.c:478
+#: src/exec_monitor.c:485 src/exec_monitor.c:492 src/exec_monitor.c:499
 #: src/exec_nopty.c:231 src/exec_nopty.c:240 src/exec_nopty.c:247
 #: src/exec_nopty.c:254 src/exec_nopty.c:261 src/exec_nopty.c:268
 #: src/exec_nopty.c:275 src/exec_nopty.c:282 src/exec_nopty.c:289
 #: src/exec_nopty.c:296 src/exec_nopty.c:303 src/exec_nopty.c:310
-#: src/exec_nopty.c:318 src/exec_nopty.c:326 src/exec_preload.c:343
-#: src/exec_ptrace.c:475 src/exec_ptrace.c:768 src/exec_ptrace.c:983
-#: src/exec_ptrace.c:1651 src/exec_ptrace.c:1842 src/exec_pty.c:581
-#: src/exec_pty.c:963 src/exec_pty.c:972 src/exec_pty.c:979 src/exec_pty.c:986
-#: src/exec_pty.c:993 src/exec_pty.c:1000 src/exec_pty.c:1007
-#: src/exec_pty.c:1014 src/exec_pty.c:1021 src/exec_pty.c:1028
-#: src/exec_pty.c:1035 src/exec_pty.c:1042 src/exec_pty.c:1050
-#: src/load_plugins.c:100 src/load_plugins.c:125 src/load_plugins.c:161
-#: src/load_plugins.c:394 src/load_plugins.c:400 src/parse_args.c:172
-#: src/parse_args.c:194 src/parse_args.c:269 src/parse_args.c:625
-#: src/parse_args.c:647 src/parse_args.c:672 src/preserve_fds.c:46
-#: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
-#: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:471
-#: src/sudo.c:228 src/sudo.c:644 src/sudo.c:898 src/sudo.c:1127 src/sudo.c:1148
-#: src/sudo.c:1441 src/sudo.c:1610 src/sudo.c:1837 src/sudo.c:2171
-#: src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:430
-#: src/sudo_edit.c:439 src/sudo_edit.c:540 src/sudo_edit.c:547
-#: src/sudo_edit.c:692 src/sudo_edit.c:712 src/sudo_intercept_common.c:115
-#: src/sudo_intercept_common.c:340
+#: src/exec_nopty.c:318 src/exec_nopty.c:326 src/exec_preload.c:347
+#: src/exec_ptrace.c:475 src/exec_ptrace.c:768 src/exec_ptrace.c:984
+#: src/exec_ptrace.c:1652 src/exec_ptrace.c:1845 src/exec_pty.c:554
+#: src/exec_pty.c:936 src/exec_pty.c:945 src/exec_pty.c:952 src/exec_pty.c:959
+#: src/exec_pty.c:966 src/exec_pty.c:973 src/exec_pty.c:980 src/exec_pty.c:987
+#: src/exec_pty.c:994 src/exec_pty.c:1001 src/exec_pty.c:1008
+#: src/exec_pty.c:1015 src/exec_pty.c:1023 src/load_plugins.c:100
+#: src/load_plugins.c:125 src/load_plugins.c:161 src/load_plugins.c:394
+#: src/load_plugins.c:400 src/parse_args.c:172 src/parse_args.c:194
+#: src/parse_args.c:269 src/parse_args.c:625 src/parse_args.c:647
+#: src/parse_args.c:672 src/preserve_fds.c:46 src/preserve_fds.c:131
+#: src/selinux.c:89 src/selinux.c:362 src/selinux.c:472 src/selinux.c:489
+#: src/selinux.c:496 src/sesh.c:206 src/sesh.c:471 src/sudo.c:229
+#: src/sudo.c:579 src/sudo.c:605 src/sudo.c:655 src/sudo.c:814 src/sudo.c:916
+#: src/sudo.c:918 src/sudo.c:1145 src/sudo.c:1166 src/sudo.c:1457
+#: src/sudo.c:1626 src/sudo.c:1853 src/sudo.c:2186 src/sudo_edit.c:89
+#: src/sudo_edit.c:149 src/sudo_edit.c:430 src/sudo_edit.c:439
+#: src/sudo_edit.c:540 src/sudo_edit.c:547 src/sudo_edit.c:692
+#: src/sudo_edit.c:712 src/sudo_intercept_common.c:122
+#: src/sudo_intercept_common.c:347
 msgid "unable to allocate memory"
 msgstr ""
 
@@ -117,7 +118,7 @@ msgstr ""
 
 #: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:664
 #: lib/util/sudo_conf.c:683 lib/util/sudo_conf.c:710 src/selinux.c:235
-#: src/selinux.c:265 src/sudo.c:373 src/sudo_edit.c:495 src/sudo_edit.c:559
+#: src/selinux.c:265 src/sudo.c:374 src/sudo_edit.c:495 src/sudo_edit.c:559
 #, c-format
 msgid "unable to open %s"
 msgstr ""
@@ -140,16 +141,16 @@ msgstr ""
 msgid "Unknown signal"
 msgstr ""
 
-#: lib/util/strtoid.c:84 lib/util/strtomode.c:52 lib/util/strtonum.c:148
-#: lib/util/strtonum.c:187 src/sesh.c:240 src/sesh.c:253
+#: lib/util/strtoid.c:84 lib/util/strtomode.c:52 lib/util/strtonum.c:147
+#: lib/util/strtonum.c:186 src/sesh.c:240 src/sesh.c:253
 msgid "invalid value"
 msgstr ""
 
-#: lib/util/strtomode.c:58 lib/util/strtonum.c:160
+#: lib/util/strtomode.c:58 lib/util/strtonum.c:159
 msgid "value too large"
 msgstr ""
 
-#: lib/util/strtomode.c:58 lib/util/strtonum.c:154
+#: lib/util/strtomode.c:58 lib/util/strtonum.c:153
 msgid "value too small"
 msgstr ""
 
@@ -282,18 +283,18 @@ msgstr ""
 msgid "starting from %s"
 msgstr ""
 
-#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:552 src/exec_monitor.c:554
-#: src/exec_pty.c:1122 src/exec_pty.c:1124 src/signal.c:144 src/signal.c:151
+#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:562 src/exec_monitor.c:564
+#: src/exec_pty.c:1094 src/exec_pty.c:1096 src/signal.c:144 src/signal.c:151
 #: src/signal.c:165 src/suspend_parent.c:143
 #, c-format
 msgid "unable to set handler for signal %d"
 msgstr ""
 
-#: src/exec.c:424
+#: src/exec.c:447
 msgid "intercept mode is not supported with SELinux RBAC on this system"
 msgstr ""
 
-#: src/exec.c:429
+#: src/exec.c:452
 msgid "unable to log sub-commands with SELinux RBAC on this system"
 msgstr ""
 
@@ -301,62 +302,62 @@ msgstr ""
 msgid "unable to remove PRIV_PROC_EXEC from PRIV_LIMIT"
 msgstr ""
 
-#: src/exec_intercept.c:70 src/exec_iolog.c:163 src/exec_iolog.c:173
+#: src/exec_intercept.c:71 src/exec_iolog.c:163 src/exec_iolog.c:173
 #: src/exec_iolog.c:218 src/exec_iolog.c:225 src/exec_iolog.c:252
-#: src/exec_monitor.c:426 src/exec_monitor.c:434 src/exec_monitor.c:442
-#: src/exec_monitor.c:449 src/exec_monitor.c:456 src/exec_monitor.c:463
-#: src/exec_monitor.c:470 src/exec_monitor.c:477 src/exec_monitor.c:484
-#: src/exec_monitor.c:491 src/exec_nopty.c:233 src/exec_nopty.c:242
+#: src/exec_monitor.c:436 src/exec_monitor.c:444 src/exec_monitor.c:452
+#: src/exec_monitor.c:459 src/exec_monitor.c:466 src/exec_monitor.c:473
+#: src/exec_monitor.c:480 src/exec_monitor.c:487 src/exec_monitor.c:494
+#: src/exec_monitor.c:501 src/exec_nopty.c:233 src/exec_nopty.c:242
 #: src/exec_nopty.c:249 src/exec_nopty.c:256 src/exec_nopty.c:263
 #: src/exec_nopty.c:270 src/exec_nopty.c:277 src/exec_nopty.c:284
 #: src/exec_nopty.c:291 src/exec_nopty.c:298 src/exec_nopty.c:305
 #: src/exec_nopty.c:312 src/exec_nopty.c:320 src/exec_nopty.c:328
-#: src/exec_nopty.c:387 src/exec_nopty.c:457 src/exec_pty.c:432
-#: src/exec_pty.c:537 src/exec_pty.c:587 src/exec_pty.c:965 src/exec_pty.c:974
-#: src/exec_pty.c:981 src/exec_pty.c:988 src/exec_pty.c:995 src/exec_pty.c:1002
-#: src/exec_pty.c:1009 src/exec_pty.c:1016 src/exec_pty.c:1023
-#: src/exec_pty.c:1030 src/exec_pty.c:1037 src/exec_pty.c:1044
+#: src/exec_nopty.c:387 src/exec_nopty.c:457 src/exec_pty.c:405
+#: src/exec_pty.c:510 src/exec_pty.c:560 src/exec_pty.c:938 src/exec_pty.c:947
+#: src/exec_pty.c:954 src/exec_pty.c:961 src/exec_pty.c:968 src/exec_pty.c:975
+#: src/exec_pty.c:982 src/exec_pty.c:989 src/exec_pty.c:996 src/exec_pty.c:1003
+#: src/exec_pty.c:1010 src/exec_pty.c:1017
 msgid "unable to add event to queue"
 msgstr ""
 
-#: src/exec_intercept.c:323 src/sudo.c:1033
+#: src/exec_intercept.c:324 src/sudo.c:1051
 msgid "command not set by the security policy"
 msgstr ""
 
-#: src/exec_intercept.c:401 src/exec_intercept.c:441 src/sudo.c:1253
-#: src/sudo.c:1298 src/sudo.c:1342
+#: src/exec_intercept.c:403 src/exec_intercept.c:443 src/sudo.c:1269
+#: src/sudo.c:1314 src/sudo.c:1358
 msgid "command rejected by policy"
 msgstr ""
 
-#: src/exec_intercept.c:512 src/sudo.c:1940
+#: src/exec_intercept.c:514 src/sudo.c:1956
 msgid "approval plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:537 src/sudo.c:1258 src/sudo.c:1303 src/sudo.c:1347
-#: src/sudo.c:1421
+#: src/exec_intercept.c:539 src/sudo.c:1274 src/sudo.c:1319 src/sudo.c:1363
+#: src/sudo.c:1437
 msgid "policy plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:566
+#: src/exec_intercept.c:568
 msgid "invalid PolicyCheckRequest"
 msgstr ""
 
-#: src/exec_intercept.c:709
+#: src/exec_intercept.c:711
 #, c-format
 msgid "client request too large: %zu"
 msgstr ""
 
-#: src/exec_intercept.c:751
+#: src/exec_intercept.c:753
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: src/exec_intercept.c:799
+#: src/exec_intercept.c:801
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: src/exec_intercept.c:825
+#: src/exec_intercept.c:827
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
@@ -388,69 +389,69 @@ msgstr ""
 msgid "unexpected reply type on backchannel: %d"
 msgstr ""
 
-#: src/exec_monitor.c:566
+#: src/exec_monitor.c:576
 msgid "unable to set controlling tty"
 msgstr ""
 
-#: src/exec_monitor.c:574 src/exec_nopty.c:504 src/exec_nopty.c:514
-#: src/exec_nopty.c:524 src/exec_nopty.c:560 src/exec_pty.c:1195
-#: src/exec_pty.c:1222 src/exec_pty.c:1242 src/exec_pty.c:1262
-#: src/tgetpass.c:306
-msgid "unable to create pipe"
+#: src/exec_monitor.c:588 src/exec_nopty.c:572 src/exec_pty.c:1072
+#: src/exec_pty.c:1081
+msgid "unable to create sockets"
 msgstr ""
 
-#: src/exec_monitor.c:584
+#: src/exec_monitor.c:597
 msgid "unable to receive message from parent"
 msgstr ""
 
-#: src/exec_monitor.c:600 src/exec_nopty.c:603 src/exec_pty.c:1303
+#: src/exec_monitor.c:612 src/exec_nopty.c:606 src/exec_pty.c:1282
 #: src/sudo_edit.c:361 src/tgetpass.c:310
 msgid "unable to fork"
 msgstr ""
 
-#: src/exec_monitor.c:604 src/exec_monitor.c:700 src/exec_nopty.c:708
+#: src/exec_monitor.c:616 src/exec_monitor.c:718 src/exec_nopty.c:712
 msgid "unable to restore tty label"
 msgstr ""
 
-#: src/exec_monitor.c:615 src/sesh.c:217 src/sudo.c:1204
+#: src/exec_monitor.c:627 src/exec_monitor.c:676 src/sesh.c:217 src/sudo.c:1220
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: src/exec_nopty.c:554 src/exec_pty.c:1131
+#: src/exec_nopty.c:507 src/exec_nopty.c:517 src/exec_nopty.c:527
+#: src/exec_nopty.c:563 src/exec_pty.c:1170 src/exec_pty.c:1197
+#: src/exec_pty.c:1220 src/exec_pty.c:1238 src/tgetpass.c:306
+msgid "unable to create pipe"
+msgstr ""
+
+#: src/exec_nopty.c:557 src/exec_pty.c:1103
 msgid "policy plugin failed session initialization"
 msgstr ""
 
-#: src/exec_nopty.c:569 src/exec_pty.c:1100 src/exec_pty.c:1109
-msgid "unable to create sockets"
-msgstr ""
-
-#: src/exec_nopty.c:696 src/exec_pty.c:1406
+#: src/exec_nopty.c:700 src/exec_pty.c:1383
 msgid "error in event loop"
 msgstr ""
 
-#: src/exec_preload.c:167 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
-#: src/net_ifs.c:620 src/net_ifs.c:852 src/sudo.c:488 src/sudo_edit.c:398
+#: src/exec_preload.c:168 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
+#: src/net_ifs.c:620 src/net_ifs.c:852 src/sudo.c:493 src/sudo_edit.c:398
 #: src/sudo_edit.c:406
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
-#: src/exec_ptrace.c:1080 src/exec_ptrace.c:1105 src/exec_ptrace.c:1925
+#: src/exec_ptrace.c:1081 src/exec_ptrace.c:1106 src/exec_ptrace.c:1929
 #, c-format
 msgid "unable to set registers for process %d"
 msgstr ""
 
-#: src/exec_ptrace.c:1100 src/exec_ptrace.c:1275 src/exec_ptrace.c:1628
+#: src/exec_ptrace.c:1101 src/exec_ptrace.c:1276 src/exec_ptrace.c:1629
 #, c-format
 msgid "process %d exited unexpectedly"
 msgstr ""
 
-#: src/exec_ptrace.c:1209
+#: src/exec_ptrace.c:1210
 msgid "unable to set seccomp filter"
 msgstr ""
 
-#: src/exec_ptrace.c:1406
+#: src/exec_ptrace.c:1407
 #, c-format
 msgid "interpreter argument , expected \"%s\", got \"%s\""
 msgstr ""
@@ -466,48 +467,48 @@ msgstr ""
 msgid "%s[%d] mismatch, expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1632
+#: src/exec_ptrace.c:1633
 #, c-format
 msgid "process %d unexpected status 0x%x"
 msgstr ""
 
-#: src/exec_ptrace.c:1723
+#: src/exec_ptrace.c:1726
 #, c-format
 msgid "unable to get event message for process %d"
 msgstr ""
 
-#: src/exec_ptrace.c:1730
+#: src/exec_ptrace.c:1733
 #, c-format
 msgid "unable to get registers for process %d"
 msgstr ""
 
-#: src/exec_pty.c:84
+#: src/exec_pty.c:86
 msgid "unable to allocate pty"
 msgstr ""
 
-#: src/exec_pty.c:131 src/exec_pty.c:284 src/tgetpass.c:251
+#: src/exec_pty.c:117 src/exec_pty.c:256 src/tgetpass.c:251
 msgid "unable to restore terminal settings"
 msgstr ""
 
-#: src/exec_pty.c:243
+#: src/exec_pty.c:217
 msgid "unable to set handler for SIGCONT"
 msgstr ""
 
-#: src/exec_pty.c:293
+#: src/exec_pty.c:266
 #, c-format
 msgid "unable to set handler for SIG%s"
 msgstr ""
 
-#: src/exec_pty.c:317
+#: src/exec_pty.c:290
 #, c-format
 msgid "unable to restore handler for SIG%s"
 msgstr ""
 
-#: src/exec_pty.c:345
+#: src/exec_pty.c:318
 msgid "unable to restore handler for SIGCONT"
 msgstr ""
 
-#: src/exec_pty.c:1353
+#: src/exec_pty.c:1331
 msgid "unable to send message to monitor process"
 msgstr ""
 
@@ -593,162 +594,162 @@ msgstr ""
 msgid "sudoedit is not supported on this platform"
 msgstr ""
 
-#: src/parse_args.c:744
+#: src/parse_args.c:745
 msgid ""
 "Only one of the -e, -h, -i, -K, -l, -s, -v or -V options may be specified"
 msgstr ""
 
-#: src/parse_args.c:757
+#: src/parse_args.c:758
 msgid "Only one of the -K, -k or -N options may be specified"
 msgstr ""
 
-#: src/parse_args.c:778
+#: src/parse_args.c:779
 #, c-format
 msgid ""
 "%s - edit files as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:780
+#: src/parse_args.c:781
 #, c-format
 msgid ""
 "%s - execute a command as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:785
+#: src/parse_args.c:786
 msgid ""
 "\n"
 "Options:\n"
 msgstr ""
 
-#: src/parse_args.c:787
+#: src/parse_args.c:788
 msgid "use a helper program for password prompting"
 msgstr ""
 
-#: src/parse_args.c:790
+#: src/parse_args.c:791
 msgid "use specified BSD authentication type"
 msgstr ""
 
-#: src/parse_args.c:794
+#: src/parse_args.c:795
 msgid "run command in the background"
 msgstr ""
 
-#: src/parse_args.c:797
+#: src/parse_args.c:798
 msgid "ring bell when prompting"
 msgstr ""
 
-#: src/parse_args.c:799
+#: src/parse_args.c:800
 msgid "close all file descriptors >= num"
 msgstr ""
 
-#: src/parse_args.c:802
+#: src/parse_args.c:803
 msgid "run command with the specified BSD login class"
 msgstr ""
 
-#: src/parse_args.c:805
+#: src/parse_args.c:806
 msgid "change the working directory before running command"
 msgstr ""
 
-#: src/parse_args.c:808
+#: src/parse_args.c:809
 msgid "preserve user environment when running command"
 msgstr ""
 
-#: src/parse_args.c:810
+#: src/parse_args.c:811
 msgid "preserve specific environment variables"
 msgstr ""
 
-#: src/parse_args.c:812
+#: src/parse_args.c:813
 msgid "edit files instead of running a command"
 msgstr ""
 
-#: src/parse_args.c:815
+#: src/parse_args.c:816
 msgid "run command as the specified group name or ID"
 msgstr ""
 
-#: src/parse_args.c:818
+#: src/parse_args.c:819
 msgid "set HOME variable to target user's home dir"
 msgstr ""
 
-#: src/parse_args.c:821
+#: src/parse_args.c:822
 msgid "display help message and exit"
 msgstr ""
 
-#: src/parse_args.c:823
+#: src/parse_args.c:824
 msgid "run command on host (if supported by plugin)"
 msgstr ""
 
-#: src/parse_args.c:826
+#: src/parse_args.c:827
 msgid "run login shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:828
+#: src/parse_args.c:829
 msgid "remove timestamp file completely"
 msgstr ""
 
-#: src/parse_args.c:831
+#: src/parse_args.c:832
 msgid "invalidate timestamp file"
 msgstr ""
 
-#: src/parse_args.c:834
+#: src/parse_args.c:835
 msgid ""
 "list user's privileges or check a specific command; use twice for longer "
 "format"
 msgstr ""
 
-#: src/parse_args.c:837
+#: src/parse_args.c:838
 msgid "non-interactive mode, no prompts are used"
 msgstr ""
 
-#: src/parse_args.c:840
+#: src/parse_args.c:841
 msgid "preserve group vector instead of setting to target's"
 msgstr ""
 
-#: src/parse_args.c:843
+#: src/parse_args.c:844
 msgid "use the specified password prompt"
 msgstr ""
 
-#: src/parse_args.c:845
+#: src/parse_args.c:846
 msgid "change the root directory before running command"
 msgstr ""
 
-#: src/parse_args.c:848
+#: src/parse_args.c:849
 msgid "create SELinux security context with specified role"
 msgstr ""
 
-#: src/parse_args.c:851
+#: src/parse_args.c:852
 msgid "read password from standard input"
 msgstr ""
 
-#: src/parse_args.c:854
+#: src/parse_args.c:855
 msgid "run shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:858
+#: src/parse_args.c:859
 msgid "create SELinux security context with specified type"
 msgstr ""
 
-#: src/parse_args.c:861
+#: src/parse_args.c:862
 msgid "terminate command after the specified time limit"
 msgstr ""
 
-#: src/parse_args.c:864
+#: src/parse_args.c:865
 msgid "in list mode, display privileges for user"
 msgstr ""
 
-#: src/parse_args.c:867
+#: src/parse_args.c:868
 msgid "run command (or edit file) as specified user name or ID"
 msgstr ""
 
-#: src/parse_args.c:869
+#: src/parse_args.c:870
 msgid "display version information and exit"
 msgstr ""
 
-#: src/parse_args.c:872
+#: src/parse_args.c:873
 msgid "update user's timestamp without running a command"
 msgstr ""
 
-#: src/parse_args.c:875
+#: src/parse_args.c:876
 msgid "stop processing command line arguments"
 msgstr ""
 
@@ -940,157 +941,157 @@ msgstr ""
 msgid "warning, resource control assignment failed for project \"%s\""
 msgstr ""
 
-#: src/sudo.c:214
+#: src/sudo.c:215
 #, c-format
 msgid "Sudo version %s\n"
 msgstr ""
 
-#: src/sudo.c:216
+#: src/sudo.c:217
 #, c-format
 msgid "Configure options: %s\n"
 msgstr ""
 
-#: src/sudo.c:224
+#: src/sudo.c:225
 msgid "fatal error, unable to load plugins"
 msgstr ""
 
-#: src/sudo.c:270
+#: src/sudo.c:271
 msgid "plugin did not return a command to execute"
 msgstr ""
 
-#: src/sudo.c:306
+#: src/sudo.c:307
 #, c-format
 msgid "unexpected sudo mode 0x%x"
 msgstr ""
 
-#: src/sudo.c:559
+#: src/sudo.c:565
 #, c-format
 msgid "you do not exist in the %s database"
 msgstr ""
 
-#: src/sudo.c:616
+#: src/sudo.c:627
 msgid "unable to determine tty"
 msgstr ""
 
-#: src/sudo.c:932
+#: src/sudo.c:950
 msgid ""
 "The \"no new privileges\" flag is set, which prevents sudo from running as "
 "root."
 msgstr ""
 
-#: src/sudo.c:934
+#: src/sudo.c:952
 msgid ""
 "If sudo is running in a container, you may need to adjust the container "
 "configuration to disable the flag."
 msgstr ""
 
-#: src/sudo.c:968
+#: src/sudo.c:986
 #, c-format
 msgid "%s must be owned by uid %d and have the setuid bit set"
 msgstr ""
 
-#: src/sudo.c:971
+#: src/sudo.c:989
 #, c-format
 msgid ""
 "effective uid is not %d, is %s on a file system with the 'nosuid' option set "
 "or an NFS file system without root privileges?"
 msgstr ""
 
-#: src/sudo.c:977
+#: src/sudo.c:995
 #, c-format
 msgid "effective uid is not %d, is sudo installed setuid root?"
 msgstr ""
 
-#: src/sudo.c:993 src/tgetpass.c:332
+#: src/sudo.c:1011 src/tgetpass.c:332
 msgid "unable to set supplementary group IDs"
 msgstr ""
 
-#: src/sudo.c:1000
+#: src/sudo.c:1018
 #, c-format
 msgid "unable to set effective gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1006
+#: src/sudo.c:1024
 #, c-format
 msgid "unable to set gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1037
+#: src/sudo.c:1055
 msgid "argv not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1041
+#: src/sudo.c:1059
 msgid "envp not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1063
+#: src/sudo.c:1081
 #, c-format
 msgid "unexpected child termination condition: %d"
 msgstr ""
 
-#: src/sudo.c:1176
+#: src/sudo.c:1193
 msgid "unable to initialize policy plugin"
 msgstr ""
 
-#: src/sudo.c:1238
+#: src/sudo.c:1254
 #, c-format
 msgid "policy plugin %s is missing the \"check_policy\" method"
 msgstr ""
 
-#: src/sudo.c:1284
+#: src/sudo.c:1300
 #, c-format
 msgid "policy plugin %s does not support listing privileges"
 msgstr ""
 
-#: src/sudo.c:1328
+#: src/sudo.c:1344
 #, c-format
 msgid "policy plugin %s does not support the -v option"
 msgstr ""
 
-#: src/sudo.c:1366
+#: src/sudo.c:1382
 #, c-format
 msgid "policy plugin %s does not support the -k/-K options"
 msgstr ""
 
-#: src/sudo.c:1495
+#: src/sudo.c:1511
 #, c-format
 msgid "error initializing I/O plugin %s"
 msgstr ""
 
-#: src/sudo.c:1498
+#: src/sudo.c:1514
 msgid "error initializing I/O plugin"
 msgstr ""
 
-#: src/sudo.c:1647
+#: src/sudo.c:1663
 #, c-format
 msgid "error initializing audit plugin %s"
 msgstr ""
 
-#: src/sudo.c:1726
+#: src/sudo.c:1742
 #, c-format
 msgid "%s: unable to log error event%s%s"
 msgstr ""
 
-#: src/sudo.c:1762
+#: src/sudo.c:1778
 #, c-format
 msgid "%s: unable to log accept event%s%s"
 msgstr ""
 
-#: src/sudo.c:1767 src/sudo.c:1805
+#: src/sudo.c:1783 src/sudo.c:1821
 msgid "audit plugin error"
 msgstr ""
 
-#: src/sudo.c:1800
+#: src/sudo.c:1816
 #, c-format
 msgid "%s: unable to log reject event%s%s"
 msgstr ""
 
-#: src/sudo.c:1860
+#: src/sudo.c:1876
 #, c-format
 msgid "error initializing approval plugin %s"
 msgstr ""
 
-#: src/sudo.c:1930
+#: src/sudo.c:1946
 msgid "command rejected by approver"
 msgstr ""
 
@@ -1151,7 +1152,7 @@ msgstr ""
 msgid "unable to read the clock"
 msgstr ""
 
-#: src/sudo_intercept_common.c:365
+#: src/sudo_intercept_common.c:372
 msgid "intercept port not set"
 msgstr ""