diff --git a/plugins/sudoers/po/sudoers.pot b/plugins/sudoers/po/sudoers.pot
index 1b28d2ec6..02631f000 100644
--- a/plugins/sudoers/po/sudoers.pot
+++ b/plugins/sudoers/po/sudoers.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.13\n"
+"Project-Id-Version: sudo 1.9.14\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2023-01-24 13:11-0700\n"
+"POT-Creation-Date: 2023-06-07 13:27-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
 
-#: confstr.sh:1 gram.y:1220 plugins/sudoers/logging.c:866
+#: confstr.sh:1 gram.y:1240 plugins/sudoers/logging.c:885
 msgid "syntax error"
 msgstr ""
 
@@ -41,33 +41,33 @@ msgstr ""
 msgid "Sorry, try again."
 msgstr ""
 
-#: gram.y:237 gram.y:304 gram.y:313 gram.y:322 gram.y:332 gram.y:342 gram.y:366
-#: gram.y:393 gram.y:402 gram.y:410 gram.y:419 gram.y:428 gram.y:502 gram.y:512
-#: gram.y:524 gram.y:572 gram.y:581 gram.y:590 gram.y:599 gram.y:731 gram.y:739
-#: gram.y:750 gram.y:762 gram.y:781 gram.y:944 gram.y:949 gram.y:957 gram.y:971
-#: gram.y:977 gram.y:1099 gram.y:1108 gram.y:1116 gram.y:1125 gram.y:1134
-#: gram.y:1163 gram.y:1172 gram.y:1180 gram.y:1280 gram.y:1410 gram.y:1777
-#: gram.y:1827 lib/eventlog/eventlog.c:235 lib/eventlog/eventlog.c:312
-#: lib/eventlog/eventlog.c:757 lib/eventlog/eventlog.c:834
-#: lib/eventlog/eventlog.c:1135 lib/iolog/iolog_filter.c:142
+#: gram.y:236 gram.y:303 gram.y:312 gram.y:321 gram.y:331 gram.y:341 gram.y:365
+#: gram.y:392 gram.y:401 gram.y:409 gram.y:418 gram.y:427 gram.y:501 gram.y:511
+#: gram.y:523 gram.y:571 gram.y:580 gram.y:589 gram.y:598 gram.y:730 gram.y:738
+#: gram.y:749 gram.y:761 gram.y:780 gram.y:943 gram.y:948 gram.y:956 gram.y:970
+#: gram.y:976 gram.y:988 gram.y:994 gram.y:1119 gram.y:1128 gram.y:1136
+#: gram.y:1145 gram.y:1154 gram.y:1183 gram.y:1192 gram.y:1200 gram.y:1300
+#: gram.y:1430 gram.y:1808 gram.y:1819 gram.y:1901 lib/eventlog/eventlog.c:236
+#: lib/eventlog/eventlog.c:313 lib/eventlog/eventlog.c:755
+#: lib/eventlog/eventlog.c:832 lib/eventlog/eventlog.c:1133
+#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:472
+#: lib/eventlog/parse_json.c:502 lib/iolog/iolog_filter.c:142
 #: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:233
-#: lib/iolog/iolog_json.c:150 lib/iolog/iolog_json.c:382
-#: lib/iolog/iolog_json.c:412 lib/iolog/iolog_legacy.c:100
-#: lib/iolog/iolog_legacy.c:111 lib/iolog/iolog_legacy.c:123
-#: lib/iolog/iolog_legacy.c:133 lib/iolog/iolog_legacy.c:139
-#: lib/iolog/iolog_loginfo.c:76 lib/iolog/iolog_loginfo.c:212
-#: logsrvd/iolog_writer.c:95 logsrvd/iolog_writer.c:100
-#: logsrvd/iolog_writer.c:134 logsrvd/iolog_writer.c:182
-#: logsrvd/iolog_writer.c:215 logsrvd/iolog_writer.c:225
-#: logsrvd/iolog_writer.c:254 logsrvd/iolog_writer.c:275
-#: logsrvd/iolog_writer.c:287 logsrvd/iolog_writer.c:297
-#: logsrvd/iolog_writer.c:307 logsrvd/iolog_writer.c:317
-#: logsrvd/iolog_writer.c:329 logsrvd/iolog_writer.c:364
-#: logsrvd/iolog_writer.c:370 logsrvd/iolog_writer.c:377
-#: logsrvd/iolog_writer.c:383 logsrvd/iolog_writer.c:567
-#: logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301 logsrvd/logsrvd.c:310
-#: logsrvd/logsrvd.c:1050 logsrvd/logsrvd.c:1113 logsrvd/logsrvd.c:1582
-#: logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771 logsrvd/logsrvd.c:1988
+#: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
+#: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
+#: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
+#: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
+#: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
+#: logsrvd/iolog_writer.c:182 logsrvd/iolog_writer.c:215
+#: logsrvd/iolog_writer.c:225 logsrvd/iolog_writer.c:254
+#: logsrvd/iolog_writer.c:275 logsrvd/iolog_writer.c:287
+#: logsrvd/iolog_writer.c:297 logsrvd/iolog_writer.c:307
+#: logsrvd/iolog_writer.c:317 logsrvd/iolog_writer.c:329
+#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
+#: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
+#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
+#: logsrvd/logsrvd.c:1058 logsrvd/logsrvd.c:1121 logsrvd/logsrvd.c:1590
+#: logsrvd/logsrvd.c:1595 logsrvd/logsrvd.c:1782 logsrvd/logsrvd.c:1999
 #: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
@@ -82,29 +82,31 @@ msgstr ""
 #: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1743
 #: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:216
 #: logsrvd/logsrvd_journal.c:217 logsrvd/logsrvd_journal.c:273
-#: logsrvd/logsrvd_journal.c:433 logsrvd/logsrvd_journal.c:435
-#: logsrvd/logsrvd_local.c:215 logsrvd/logsrvd_local.c:216
-#: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:279
-#: logsrvd/logsrvd_local.c:417 logsrvd/logsrvd_local.c:466
-#: logsrvd/logsrvd_local.c:467 logsrvd/logsrvd_local.c:472
-#: logsrvd/logsrvd_local.c:473 logsrvd/logsrvd_queue.c:159
-#: logsrvd/logsrvd_queue.c:189 logsrvd/logsrvd_queue.c:266
-#: logsrvd/logsrvd_relay.c:444 logsrvd/logsrvd_relay.c:743
-#: logsrvd/logsrvd_relay.c:850 logsrvd/sendlog.c:251 logsrvd/sendlog.c:260
-#: logsrvd/sendlog.c:291 logsrvd/sendlog.c:338 logsrvd/sendlog.c:615
-#: logsrvd/sendlog.c:1801 plugins/sudoers/audit.c:116
-#: plugins/sudoers/auth/bsdauth.c:150 plugins/sudoers/auth/kerb5.c:121
+#: logsrvd/logsrvd_journal.c:278 logsrvd/logsrvd_journal.c:438
+#: logsrvd/logsrvd_journal.c:440 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_local.c:216 logsrvd/logsrvd_local.c:278
+#: logsrvd/logsrvd_local.c:279 logsrvd/logsrvd_local.c:417
+#: logsrvd/logsrvd_local.c:466 logsrvd/logsrvd_local.c:467
+#: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:473
+#: logsrvd/logsrvd_queue.c:159 logsrvd/logsrvd_queue.c:189
+#: logsrvd/logsrvd_queue.c:266 logsrvd/logsrvd_relay.c:446
+#: logsrvd/logsrvd_relay.c:745 logsrvd/logsrvd_relay.c:852
+#: logsrvd/sendlog.c:251 logsrvd/sendlog.c:260 logsrvd/sendlog.c:292
+#: logsrvd/sendlog.c:298 logsrvd/sendlog.c:347 logsrvd/sendlog.c:624
+#: logsrvd/sendlog.c:1810 plugins/sudoers/audit.c:116
+#: plugins/sudoers/auth/bsdauth.c:152 plugins/sudoers/auth/kerb5.c:121
 #: plugins/sudoers/auth/kerb5.c:148 plugins/sudoers/auth/pam.c:687
 #: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/auth/sia.c:59
-#: plugins/sudoers/check_aliases.c:168 plugins/sudoers/cvtsudoers.c:131
-#: plugins/sudoers/cvtsudoers.c:175 plugins/sudoers/cvtsudoers.c:192
-#: plugins/sudoers/cvtsudoers.c:203 plugins/sudoers/cvtsudoers.c:333
-#: plugins/sudoers/cvtsudoers.c:372 plugins/sudoers/cvtsudoers.c:392
-#: plugins/sudoers/cvtsudoers.c:537 plugins/sudoers/cvtsudoers.c:670
-#: plugins/sudoers/cvtsudoers.c:688 plugins/sudoers/cvtsudoers.c:862
-#: plugins/sudoers/cvtsudoers.c:870 plugins/sudoers/cvtsudoers.c:1365
-#: plugins/sudoers/cvtsudoers.c:1369 plugins/sudoers/cvtsudoers.c:1471
-#: plugins/sudoers/cvtsudoers_csv.c:183 plugins/sudoers/cvtsudoers_csv.c:246
+#: plugins/sudoers/canon_path.c:129 plugins/sudoers/canon_path.c:160
+#: plugins/sudoers/check_aliases.c:168 plugins/sudoers/cvtsudoers.c:132
+#: plugins/sudoers/cvtsudoers.c:176 plugins/sudoers/cvtsudoers.c:193
+#: plugins/sudoers/cvtsudoers.c:204 plugins/sudoers/cvtsudoers.c:334
+#: plugins/sudoers/cvtsudoers.c:373 plugins/sudoers/cvtsudoers.c:393
+#: plugins/sudoers/cvtsudoers.c:538 plugins/sudoers/cvtsudoers.c:691
+#: plugins/sudoers/cvtsudoers.c:709 plugins/sudoers/cvtsudoers.c:883
+#: plugins/sudoers/cvtsudoers.c:891 plugins/sudoers/cvtsudoers.c:1386
+#: plugins/sudoers/cvtsudoers.c:1390 plugins/sudoers/cvtsudoers.c:1492
+#: plugins/sudoers/cvtsudoers_csv.c:183 plugins/sudoers/cvtsudoers_csv.c:247
 #: plugins/sudoers/cvtsudoers_json.c:76 plugins/sudoers/cvtsudoers_ldif.c:151
 #: plugins/sudoers/cvtsudoers_ldif.c:194 plugins/sudoers/cvtsudoers_ldif.c:235
 #: plugins/sudoers/cvtsudoers_ldif.c:300 plugins/sudoers/cvtsudoers_ldif.c:376
@@ -122,143 +124,152 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1158
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
-#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:197
+#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
+#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:197
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
-#: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
+#: plugins/sudoers/filedigest.c:55 plugins/sudoers/filedigest.c:71
 #: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:212
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
-#: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
-#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:466
-#: plugins/sudoers/ldap.c:757 plugins/sudoers/ldap.c:921
-#: plugins/sudoers/ldap.c:1337 plugins/sudoers/ldap.c:1763
-#: plugins/sudoers/ldap.c:1800 plugins/sudoers/ldap.c:2016
-#: plugins/sudoers/ldap.c:2117 plugins/sudoers/ldap.c:2133
-#: plugins/sudoers/ldap_conf.c:218 plugins/sudoers/ldap_conf.c:250
-#: plugins/sudoers/ldap_conf.c:302 plugins/sudoers/ldap_conf.c:338
-#: plugins/sudoers/ldap_conf.c:444 plugins/sudoers/ldap_conf.c:459
-#: plugins/sudoers/ldap_conf.c:564 plugins/sudoers/ldap_conf.c:597
-#: plugins/sudoers/ldap_conf.c:689 plugins/sudoers/ldap_conf.c:771
+#: plugins/sudoers/iolog.c:667 plugins/sudoers/iolog.c:693
+#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:447
+#: plugins/sudoers/ldap.c:622 plugins/sudoers/ldap.c:786
+#: plugins/sudoers/ldap.c:1210 plugins/sudoers/ldap.c:1636
+#: plugins/sudoers/ldap.c:1673 plugins/sudoers/ldap.c:1888
+#: plugins/sudoers/ldap.c:1997 plugins/sudoers/ldap.c:2013
+#: plugins/sudoers/ldap_conf.c:215 plugins/sudoers/ldap_conf.c:247
+#: plugins/sudoers/ldap_conf.c:299 plugins/sudoers/ldap_conf.c:335
+#: plugins/sudoers/ldap_conf.c:441 plugins/sudoers/ldap_conf.c:456
+#: plugins/sudoers/ldap_conf.c:562 plugins/sudoers/ldap_conf.c:595
+#: plugins/sudoers/ldap_conf.c:691 plugins/sudoers/ldap_conf.c:773
 #: plugins/sudoers/ldap_util.c:294 plugins/sudoers/ldap_util.c:301
 #: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
 #: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:402
-#: plugins/sudoers/log_client.c:715 plugins/sudoers/log_client.c:736
-#: plugins/sudoers/log_client.c:1415 plugins/sudoers/log_client.c:1536
-#: plugins/sudoers/log_client.c:1636 plugins/sudoers/log_client.c:1972
-#: plugins/sudoers/log_client.c:2031 plugins/sudoers/logging.c:110
-#: plugins/sudoers/logging.c:189 plugins/sudoers/logging.c:457
-#: plugins/sudoers/logging.c:672 plugins/sudoers/logging.c:809
-#: plugins/sudoers/match_command.c:335 plugins/sudoers/match_command.c:603
-#: plugins/sudoers/match_command.c:654 plugins/sudoers/match_command.c:728
-#: plugins/sudoers/match_command.c:776 plugins/sudoers/match_digest.c:93
-#: plugins/sudoers/parse.c:267 plugins/sudoers/parse.c:284
-#: plugins/sudoers/parse.c:303 plugins/sudoers/parse.c:322
-#: plugins/sudoers/parse.c:339 plugins/sudoers/parse.c:362
-#: plugins/sudoers/parse.c:373 plugins/sudoers/parse_ldif.c:153
-#: plugins/sudoers/parse_ldif.c:184 plugins/sudoers/parse_ldif.c:253
-#: plugins/sudoers/parse_ldif.c:261 plugins/sudoers/parse_ldif.c:266
-#: plugins/sudoers/parse_ldif.c:342 plugins/sudoers/parse_ldif.c:353
-#: plugins/sudoers/parse_ldif.c:380 plugins/sudoers/parse_ldif.c:397
-#: plugins/sudoers/parse_ldif.c:409 plugins/sudoers/parse_ldif.c:413
-#: plugins/sudoers/parse_ldif.c:427 plugins/sudoers/parse_ldif.c:484
-#: plugins/sudoers/parse_ldif.c:598 plugins/sudoers/parse_ldif.c:628
-#: plugins/sudoers/parse_ldif.c:653 plugins/sudoers/parse_ldif.c:711
-#: plugins/sudoers/parse_ldif.c:728 plugins/sudoers/parse_ldif.c:756
-#: plugins/sudoers/parse_ldif.c:763 plugins/sudoers/policy.c:626
-#: plugins/sudoers/policy.c:1033 plugins/sudoers/prompt.c:93
-#: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
-#: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
-#: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
-#: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:945
-#: plugins/sudoers/pwutil.c:993 plugins/sudoers/pwutil.c:1052
-#: plugins/sudoers/sssd.c:145 plugins/sudoers/sssd.c:185
-#: plugins/sudoers/sssd.c:414 plugins/sudoers/sssd.c:479
-#: plugins/sudoers/sssd.c:505 plugins/sudoers/sssd.c:568
-#: plugins/sudoers/sssd.c:761 plugins/sudoers/strvec_join.c:53
-#: plugins/sudoers/stubs.c:112 plugins/sudoers/stubs.c:120
-#: plugins/sudoers/sudoers.c:354 plugins/sudoers/sudoers.c:380
-#: plugins/sudoers/sudoers.c:447 plugins/sudoers/sudoers.c:464
-#: plugins/sudoers/sudoers.c:505 plugins/sudoers/sudoers.c:849
-#: plugins/sudoers/sudoers.c:902 plugins/sudoers/sudoers.c:1054
-#: plugins/sudoers/sudoers.c:1114 plugins/sudoers/sudoers.c:1369
+#: plugins/sudoers/log_client.c:717 plugins/sudoers/log_client.c:739
+#: plugins/sudoers/log_client.c:744 plugins/sudoers/log_client.c:1423
+#: plugins/sudoers/log_client.c:1544 plugins/sudoers/log_client.c:1667
+#: plugins/sudoers/log_client.c:1986 plugins/sudoers/log_client.c:2045
+#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:189
+#: plugins/sudoers/logging.c:457 plugins/sudoers/logging.c:690
+#: plugins/sudoers/logging.c:846 plugins/sudoers/match_command.c:295
+#: plugins/sudoers/match_command.c:563 plugins/sudoers/match_command.c:629
+#: plugins/sudoers/match_command.c:724 plugins/sudoers/match_command.c:770
+#: plugins/sudoers/match_digest.c:82 plugins/sudoers/parse.c:279
+#: plugins/sudoers/parse.c:296 plugins/sudoers/parse.c:315
+#: plugins/sudoers/parse.c:334 plugins/sudoers/parse.c:351
+#: plugins/sudoers/parse.c:374 plugins/sudoers/parse.c:385
+#: plugins/sudoers/parse_ldif.c:153 plugins/sudoers/parse_ldif.c:184
+#: plugins/sudoers/parse_ldif.c:253 plugins/sudoers/parse_ldif.c:261
+#: plugins/sudoers/parse_ldif.c:266 plugins/sudoers/parse_ldif.c:342
+#: plugins/sudoers/parse_ldif.c:353 plugins/sudoers/parse_ldif.c:380
+#: plugins/sudoers/parse_ldif.c:397 plugins/sudoers/parse_ldif.c:409
+#: plugins/sudoers/parse_ldif.c:413 plugins/sudoers/parse_ldif.c:427
+#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
+#: plugins/sudoers/parse_ldif.c:628 plugins/sudoers/parse_ldif.c:653
+#: plugins/sudoers/parse_ldif.c:711 plugins/sudoers/parse_ldif.c:728
+#: plugins/sudoers/parse_ldif.c:756 plugins/sudoers/parse_ldif.c:763
+#: plugins/sudoers/policy.c:622 plugins/sudoers/policy.c:1050
+#: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
+#: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
+#: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
+#: plugins/sudoers/pwutil.c:659 plugins/sudoers/pwutil.c:857
+#: plugins/sudoers/pwutil.c:945 plugins/sudoers/pwutil.c:993
+#: plugins/sudoers/pwutil.c:1052 plugins/sudoers/sssd.c:145
+#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
+#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
+#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:762
+#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:126
+#: plugins/sudoers/stubs.c:134 plugins/sudoers/sudoers.c:352
+#: plugins/sudoers/sudoers.c:378 plugins/sudoers/sudoers.c:441
+#: plugins/sudoers/sudoers.c:673 plugins/sudoers/sudoers.c:683
+#: plugins/sudoers/sudoers.c:824 plugins/sudoers/sudoers.c:890
+#: plugins/sudoers/sudoers.c:946 plugins/sudoers/sudoers.c:998
+#: plugins/sudoers/sudoers.c:1174 plugins/sudoers/sudoers.c:1241
+#: plugins/sudoers/sudoers.c:1325 plugins/sudoers/sudoers.c:1513
 #: plugins/sudoers/sudoreplay.c:559 plugins/sudoers/sudoreplay.c:562
 #: plugins/sudoers/sudoreplay.c:1278 plugins/sudoers/sudoreplay.c:1334
 #: plugins/sudoers/sudoreplay.c:1530 plugins/sudoers/sudoreplay.c:1534
-#: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:224
-#: plugins/sudoers/testsudoers.c:241 plugins/sudoers/testsudoers.c:588
-#: plugins/sudoers/timestamp.c:451 plugins/sudoers/timestamp.c:495
-#: plugins/sudoers/timestamp.c:1017 plugins/sudoers/timestamp.c:1146
-#: plugins/sudoers/toke_util.c:78 plugins/sudoers/toke_util.c:106
-#: plugins/sudoers/toke_util.c:131 plugins/sudoers/toke_util.c:161
-#: plugins/sudoers/toke_util.c:200 plugins/sudoers/tsdump.c:123
-#: plugins/sudoers/visudo.c:150 plugins/sudoers/visudo.c:385
-#: plugins/sudoers/visudo.c:391 plugins/sudoers/visudo.c:502
-#: plugins/sudoers/visudo.c:1056 toke.l:1031 toke.l:1163 toke.l:1234
+#: plugins/sudoers/testsudoers.c:123 plugins/sudoers/testsudoers.c:220
+#: plugins/sudoers/testsudoers.c:233 plugins/sudoers/testsudoers.c:250
+#: plugins/sudoers/testsudoers.c:617 plugins/sudoers/timestamp.c:476
+#: plugins/sudoers/timestamp.c:520 plugins/sudoers/timestamp.c:1042
+#: plugins/sudoers/timestamp.c:1171 plugins/sudoers/toke_util.c:78
+#: plugins/sudoers/toke_util.c:106 plugins/sudoers/toke_util.c:131
+#: plugins/sudoers/toke_util.c:161 plugins/sudoers/toke_util.c:200
+#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:154
+#: plugins/sudoers/visudo.c:263 plugins/sudoers/visudo.c:388
+#: plugins/sudoers/visudo.c:394 plugins/sudoers/visudo.c:505
+#: plugins/sudoers/visudo.c:1065 plugins/sudoers/visudo.c:1087
+#: plugins/sudoers/visudo.c:1180 toke.l:1032 toke.l:1195 toke.l:1223
+#: toke.l:1299
 msgid "unable to allocate memory"
 msgstr ""
 
-#: gram.y:623
+#: gram.y:622
 msgid "a digest requires a path name"
 msgstr ""
 
-#: gram.y:645
+#: gram.y:644
 msgid "values for \"CWD\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:651
+#: gram.y:650
 msgid "\"CWD\" path too long"
 msgstr ""
 
-#: gram.y:661
+#: gram.y:660
 msgid "values for \"CHROOT\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:667
+#: gram.y:666
 msgid "\"CHROOT\" path too long"
 msgstr ""
 
-#: gram.y:802
+#: gram.y:801
 #, c-format
 msgid "syntax error, reserved word %s used as an alias name"
 msgstr ""
 
-#: gram.y:825
+#: gram.y:824
 msgid "invalid notbefore value"
 msgstr ""
 
-#: gram.y:834
+#: gram.y:833
 msgid "invalid notafter value"
 msgstr ""
 
-#: gram.y:844 plugins/sudoers/policy.c:385
+#: gram.y:843 plugins/sudoers/policy.c:381
 msgid "timeout value too large"
 msgstr ""
 
-#: gram.y:846 plugins/sudoers/policy.c:387
+#: gram.y:845 plugins/sudoers/policy.c:383
 msgid "invalid timeout value"
 msgstr ""
 
-#: gram.y:967 plugins/sudoers/sudoers.c:1072
+#: gram.y:966 plugins/sudoers/sudoers.c:1192
 msgid "command too long"
 msgstr ""
 
-#: gram.y:1224 plugins/sudoers/check_aliases.c:96
-#: plugins/sudoers/defaults.c:1276
+#: gram.y:1000
+msgid "expected a fully-qualified path name"
+msgstr ""
+
+#: gram.y:1244 plugins/sudoers/check_aliases.c:96
+#: plugins/sudoers/defaults.c:1275
 #, c-format
 msgid "%s:%d:%d: %s\n"
 msgstr ""
 
-#: gram.y:1278
+#: gram.y:1298
 #, c-format
 msgid "Alias \"%s\" already defined"
 msgstr ""
 
-#: gram.y:1777 gram.y:1827 lib/eventlog/eventlog.c:235
-#: lib/eventlog/eventlog.c:757 lib/eventlog/eventlog.c:830
-#: lib/eventlog/eventlog.c:833 lib/eventlog/eventlog.c:1135
-#: lib/iolog/iolog_filter.c:142 lib/iolog/iolog_filter.c:202
-#: lib/iolog/iolog_filter.c:232 lib/iolog/iolog_json.c:150
-#: lib/iolog/iolog_json.c:381 lib/iolog/iolog_json.c:412
+#: gram.y:1808 gram.y:1819 gram.y:1901 lib/eventlog/eventlog.c:236
+#: lib/eventlog/eventlog.c:755 lib/eventlog/eventlog.c:828
+#: lib/eventlog/eventlog.c:831 lib/eventlog/eventlog.c:1133
+#: lib/eventlog/parse_json.c:185 lib/eventlog/parse_json.c:471
+#: lib/eventlog/parse_json.c:502 lib/iolog/iolog_filter.c:142
+#: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:232
 #: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
 #: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
 #: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
@@ -273,13 +284,13 @@ msgstr ""
 #: logsrvd/iolog_writer.c:316 logsrvd/iolog_writer.c:328
 #: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
 #: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
-#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301
-#: logsrvd/logsrvd.c:310 logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:490
-#: logsrvd/logsrvd.c:522 logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:611
-#: logsrvd/logsrvd.c:660 logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:732
-#: logsrvd/logsrvd.c:1124 logsrvd/logsrvd.c:1439 logsrvd/logsrvd.c:1446
-#: logsrvd/logsrvd.c:1582 logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771
-#: logsrvd/logsrvd.c:1988 logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
+#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:92 logsrvd/logsrvd.c:323
+#: logsrvd/logsrvd.c:461 logsrvd/logsrvd.c:498 logsrvd/logsrvd.c:530
+#: logsrvd/logsrvd.c:584 logsrvd/logsrvd.c:619 logsrvd/logsrvd.c:668
+#: logsrvd/logsrvd.c:704 logsrvd/logsrvd.c:740 logsrvd/logsrvd.c:1132
+#: logsrvd/logsrvd.c:1447 logsrvd/logsrvd.c:1454 logsrvd/logsrvd.c:1590
+#: logsrvd/logsrvd.c:1595 logsrvd/logsrvd.c:1782 logsrvd/logsrvd.c:1999
+#: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
 #: logsrvd/logsrvd_conf.c:626 logsrvd/logsrvd_conf.c:649
@@ -294,26 +305,27 @@ msgstr ""
 #: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:125
 #: logsrvd/logsrvd_journal.c:216 logsrvd/logsrvd_journal.c:246
 #: logsrvd/logsrvd_journal.c:250 logsrvd/logsrvd_journal.c:258
-#: logsrvd/logsrvd_journal.c:281 logsrvd/logsrvd_journal.c:285
-#: logsrvd/logsrvd_journal.c:433 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_journal.c:286 logsrvd/logsrvd_journal.c:290
+#: logsrvd/logsrvd_journal.c:438 logsrvd/logsrvd_local.c:215
 #: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:466
 #: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:491
 #: logsrvd/logsrvd_queue.c:158 logsrvd/logsrvd_queue.c:189
 #: logsrvd/logsrvd_queue.c:266 logsrvd/sendlog.c:251 logsrvd/sendlog.c:260
-#: logsrvd/sendlog.c:291 logsrvd/sendlog.c:338 logsrvd/sendlog.c:615
-#: logsrvd/sendlog.c:1503 logsrvd/sendlog.c:1510 logsrvd/sendlog.c:1733
-#: logsrvd/sendlog.c:1801 logsrvd/tls_init.c:305 logsrvd/tls_init.c:329
-#: logsrvd/tls_init.c:340 plugins/sudoers/audit.c:116
+#: logsrvd/sendlog.c:292 logsrvd/sendlog.c:298 logsrvd/sendlog.c:347
+#: logsrvd/sendlog.c:624 logsrvd/sendlog.c:1512 logsrvd/sendlog.c:1519
+#: logsrvd/sendlog.c:1742 logsrvd/sendlog.c:1810 logsrvd/tls_init.c:305
+#: logsrvd/tls_init.c:329 logsrvd/tls_init.c:340 plugins/sudoers/audit.c:116
 #: plugins/sudoers/auth/pam.c:502 plugins/sudoers/auth/pam.c:687
-#: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/check_aliases.c:168
-#: plugins/sudoers/cvtsudoers.c:131 plugins/sudoers/cvtsudoers.c:174
-#: plugins/sudoers/cvtsudoers.c:191 plugins/sudoers/cvtsudoers.c:202
-#: plugins/sudoers/cvtsudoers.c:332 plugins/sudoers/cvtsudoers.c:536
-#: plugins/sudoers/cvtsudoers.c:669 plugins/sudoers/cvtsudoers.c:687
-#: plugins/sudoers/cvtsudoers.c:862 plugins/sudoers/cvtsudoers.c:869
-#: plugins/sudoers/cvtsudoers.c:1365 plugins/sudoers/cvtsudoers.c:1369
-#: plugins/sudoers/cvtsudoers.c:1471 plugins/sudoers/cvtsudoers_csv.c:182
-#: plugins/sudoers/cvtsudoers_csv.c:245 plugins/sudoers/cvtsudoers_json.c:75
+#: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/canon_path.c:129
+#: plugins/sudoers/canon_path.c:160 plugins/sudoers/check_aliases.c:168
+#: plugins/sudoers/cvtsudoers.c:132 plugins/sudoers/cvtsudoers.c:175
+#: plugins/sudoers/cvtsudoers.c:192 plugins/sudoers/cvtsudoers.c:203
+#: plugins/sudoers/cvtsudoers.c:333 plugins/sudoers/cvtsudoers.c:537
+#: plugins/sudoers/cvtsudoers.c:690 plugins/sudoers/cvtsudoers.c:708
+#: plugins/sudoers/cvtsudoers.c:883 plugins/sudoers/cvtsudoers.c:890
+#: plugins/sudoers/cvtsudoers.c:1386 plugins/sudoers/cvtsudoers.c:1390
+#: plugins/sudoers/cvtsudoers.c:1492 plugins/sudoers/cvtsudoers_csv.c:182
+#: plugins/sudoers/cvtsudoers_csv.c:246 plugins/sudoers/cvtsudoers_json.c:75
 #: plugins/sudoers/cvtsudoers_ldif.c:150 plugins/sudoers/cvtsudoers_ldif.c:193
 #: plugins/sudoers/cvtsudoers_ldif.c:234 plugins/sudoers/cvtsudoers_ldif.c:299
 #: plugins/sudoers/cvtsudoers_ldif.c:375 plugins/sudoers/cvtsudoers_ldif.c:429
@@ -332,42 +344,43 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1157
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
-#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:197
+#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
+#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:197
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
-#: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
+#: plugins/sudoers/filedigest.c:55 plugins/sudoers/filedigest.c:71
 #: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:211
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
-#: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
-#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:466
-#: plugins/sudoers/ldap.c:757 plugins/sudoers/ldap.c:921
-#: plugins/sudoers/ldap.c:1337 plugins/sudoers/ldap.c:1763
-#: plugins/sudoers/ldap.c:1800 plugins/sudoers/ldap.c:2016
-#: plugins/sudoers/ldap.c:2117 plugins/sudoers/ldap.c:2133
-#: plugins/sudoers/ldap_conf.c:218 plugins/sudoers/ldap_conf.c:250
-#: plugins/sudoers/ldap_conf.c:302 plugins/sudoers/ldap_conf.c:338
-#: plugins/sudoers/ldap_conf.c:444 plugins/sudoers/ldap_conf.c:459
-#: plugins/sudoers/ldap_conf.c:564 plugins/sudoers/ldap_conf.c:597
-#: plugins/sudoers/ldap_conf.c:688 plugins/sudoers/ldap_conf.c:771
+#: plugins/sudoers/iolog.c:667 plugins/sudoers/iolog.c:693
+#: plugins/sudoers/ldap.c:161 plugins/sudoers/ldap.c:447
+#: plugins/sudoers/ldap.c:622 plugins/sudoers/ldap.c:786
+#: plugins/sudoers/ldap.c:1210 plugins/sudoers/ldap.c:1636
+#: plugins/sudoers/ldap.c:1673 plugins/sudoers/ldap.c:1888
+#: plugins/sudoers/ldap.c:1997 plugins/sudoers/ldap.c:2013
+#: plugins/sudoers/ldap_conf.c:215 plugins/sudoers/ldap_conf.c:247
+#: plugins/sudoers/ldap_conf.c:299 plugins/sudoers/ldap_conf.c:335
+#: plugins/sudoers/ldap_conf.c:441 plugins/sudoers/ldap_conf.c:456
+#: plugins/sudoers/ldap_conf.c:562 plugins/sudoers/ldap_conf.c:595
+#: plugins/sudoers/ldap_conf.c:690 plugins/sudoers/ldap_conf.c:773
 #: plugins/sudoers/ldap_util.c:293 plugins/sudoers/ldap_util.c:300
 #: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
 #: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:228
 #: plugins/sudoers/log_client.c:250 plugins/sudoers/log_client.c:264
-#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:715
-#: plugins/sudoers/log_client.c:736 plugins/sudoers/log_client.c:1415
-#: plugins/sudoers/log_client.c:1536 plugins/sudoers/log_client.c:1636
-#: plugins/sudoers/log_client.c:1972 plugins/sudoers/log_client.c:2031
-#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:188
-#: plugins/sudoers/logging.c:189 plugins/sudoers/logging.c:457
-#: plugins/sudoers/logging.c:672 plugins/sudoers/logging.c:809
-#: plugins/sudoers/logging.c:880 plugins/sudoers/logging.c:892
-#: plugins/sudoers/match_command.c:334 plugins/sudoers/match_command.c:602
-#: plugins/sudoers/match_command.c:653 plugins/sudoers/match_command.c:728
-#: plugins/sudoers/match_command.c:775 plugins/sudoers/match_digest.c:93
-#: plugins/sudoers/parse.c:266 plugins/sudoers/parse.c:283
-#: plugins/sudoers/parse.c:302 plugins/sudoers/parse.c:321
-#: plugins/sudoers/parse.c:338 plugins/sudoers/parse.c:361
-#: plugins/sudoers/parse.c:372 plugins/sudoers/parse_ldif.c:152
+#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:717
+#: plugins/sudoers/log_client.c:739 plugins/sudoers/log_client.c:744
+#: plugins/sudoers/log_client.c:1423 plugins/sudoers/log_client.c:1544
+#: plugins/sudoers/log_client.c:1667 plugins/sudoers/log_client.c:1986
+#: plugins/sudoers/log_client.c:2045 plugins/sudoers/logging.c:110
+#: plugins/sudoers/logging.c:188 plugins/sudoers/logging.c:189
+#: plugins/sudoers/logging.c:457 plugins/sudoers/logging.c:690
+#: plugins/sudoers/logging.c:734 plugins/sudoers/logging.c:846
+#: plugins/sudoers/logging.c:899 plugins/sudoers/logging.c:906
+#: plugins/sudoers/match_command.c:294 plugins/sudoers/match_command.c:562
+#: plugins/sudoers/match_command.c:628 plugins/sudoers/match_command.c:724
+#: plugins/sudoers/match_command.c:769 plugins/sudoers/match_digest.c:82
+#: plugins/sudoers/parse.c:278 plugins/sudoers/parse.c:295
+#: plugins/sudoers/parse.c:314 plugins/sudoers/parse.c:333
+#: plugins/sudoers/parse.c:350 plugins/sudoers/parse.c:373
+#: plugins/sudoers/parse.c:384 plugins/sudoers/parse_ldif.c:152
 #: plugins/sudoers/parse_ldif.c:183 plugins/sudoers/parse_ldif.c:252
 #: plugins/sudoers/parse_ldif.c:260 plugins/sudoers/parse_ldif.c:265
 #: plugins/sudoers/parse_ldif.c:341 plugins/sudoers/parse_ldif.c:352
@@ -377,56 +390,60 @@ msgstr ""
 #: plugins/sudoers/parse_ldif.c:598 plugins/sudoers/parse_ldif.c:627
 #: plugins/sudoers/parse_ldif.c:652 plugins/sudoers/parse_ldif.c:710
 #: plugins/sudoers/parse_ldif.c:727 plugins/sudoers/parse_ldif.c:755
-#: plugins/sudoers/parse_ldif.c:762 plugins/sudoers/policy.c:154
-#: plugins/sudoers/policy.c:163 plugins/sudoers/policy.c:172
-#: plugins/sudoers/policy.c:201 plugins/sudoers/policy.c:370
-#: plugins/sudoers/policy.c:385 plugins/sudoers/policy.c:387
-#: plugins/sudoers/policy.c:425 plugins/sudoers/policy.c:434
-#: plugins/sudoers/policy.c:482 plugins/sudoers/policy.c:492
-#: plugins/sudoers/policy.c:501 plugins/sudoers/policy.c:510
-#: plugins/sudoers/policy.c:519 plugins/sudoers/policy.c:626
-#: plugins/sudoers/policy.c:1033 plugins/sudoers/prompt.c:93
+#: plugins/sudoers/parse_ldif.c:762 plugins/sudoers/policy.c:148
+#: plugins/sudoers/policy.c:157 plugins/sudoers/policy.c:166
+#: plugins/sudoers/policy.c:196 plugins/sudoers/policy.c:366
+#: plugins/sudoers/policy.c:381 plugins/sudoers/policy.c:383
+#: plugins/sudoers/policy.c:421 plugins/sudoers/policy.c:430
+#: plugins/sudoers/policy.c:478 plugins/sudoers/policy.c:488
+#: plugins/sudoers/policy.c:497 plugins/sudoers/policy.c:506
+#: plugins/sudoers/policy.c:515 plugins/sudoers/policy.c:622
+#: plugins/sudoers/policy.c:1050 plugins/sudoers/prompt.c:93
 #: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
 #: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
 #: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
 #: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:945
 #: plugins/sudoers/pwutil.c:993 plugins/sudoers/pwutil.c:1052
-#: plugins/sudoers/set_perms.c:363 plugins/sudoers/set_perms.c:706
-#: plugins/sudoers/set_perms.c:1073 plugins/sudoers/set_perms.c:1380
-#: plugins/sudoers/set_perms.c:1549 plugins/sudoers/sssd.c:144
+#: plugins/sudoers/set_perms.c:369 plugins/sudoers/set_perms.c:717
+#: plugins/sudoers/set_perms.c:1089 plugins/sudoers/set_perms.c:1401
+#: plugins/sudoers/set_perms.c:1570 plugins/sudoers/sssd.c:144
 #: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
 #: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
-#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:761
-#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:112
-#: plugins/sudoers/stubs.c:120 plugins/sudoers/sudoers.c:354
-#: plugins/sudoers/sudoers.c:380 plugins/sudoers/sudoers.c:447
-#: plugins/sudoers/sudoers.c:464 plugins/sudoers/sudoers.c:505
-#: plugins/sudoers/sudoers.c:849 plugins/sudoers/sudoers.c:902
-#: plugins/sudoers/sudoers.c:1054 plugins/sudoers/sudoers.c:1114
-#: plugins/sudoers/sudoers.c:1369 plugins/sudoers/sudoreplay.c:559
-#: plugins/sudoers/sudoreplay.c:562 plugins/sudoers/sudoreplay.c:1278
-#: plugins/sudoers/sudoreplay.c:1334 plugins/sudoers/sudoreplay.c:1530
-#: plugins/sudoers/sudoreplay.c:1534 plugins/sudoers/testsudoers.c:120
-#: plugins/sudoers/testsudoers.c:224 plugins/sudoers/testsudoers.c:241
-#: plugins/sudoers/testsudoers.c:588 plugins/sudoers/timestamp.c:451
-#: plugins/sudoers/timestamp.c:495 plugins/sudoers/timestamp.c:1017
-#: plugins/sudoers/timestamp.c:1146 plugins/sudoers/toke_util.c:78
+#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:762
+#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:126
+#: plugins/sudoers/stubs.c:134 plugins/sudoers/sudoers.c:352
+#: plugins/sudoers/sudoers.c:378 plugins/sudoers/sudoers.c:441
+#: plugins/sudoers/sudoers.c:673 plugins/sudoers/sudoers.c:683
+#: plugins/sudoers/sudoers.c:824 plugins/sudoers/sudoers.c:890
+#: plugins/sudoers/sudoers.c:946 plugins/sudoers/sudoers.c:998
+#: plugins/sudoers/sudoers.c:1174 plugins/sudoers/sudoers.c:1241
+#: plugins/sudoers/sudoers.c:1324 plugins/sudoers/sudoers.c:1513
+#: plugins/sudoers/sudoreplay.c:559 plugins/sudoers/sudoreplay.c:562
+#: plugins/sudoers/sudoreplay.c:1278 plugins/sudoers/sudoreplay.c:1334
+#: plugins/sudoers/sudoreplay.c:1530 plugins/sudoers/sudoreplay.c:1534
+#: plugins/sudoers/testsudoers.c:123 plugins/sudoers/testsudoers.c:220
+#: plugins/sudoers/testsudoers.c:233 plugins/sudoers/testsudoers.c:250
+#: plugins/sudoers/testsudoers.c:617 plugins/sudoers/timestamp.c:476
+#: plugins/sudoers/timestamp.c:520 plugins/sudoers/timestamp.c:1042
+#: plugins/sudoers/timestamp.c:1171 plugins/sudoers/toke_util.c:78
 #: plugins/sudoers/toke_util.c:106 plugins/sudoers/toke_util.c:131
 #: plugins/sudoers/toke_util.c:160 plugins/sudoers/toke_util.c:200
-#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:150
-#: plugins/sudoers/visudo.c:385 plugins/sudoers/visudo.c:391
-#: plugins/sudoers/visudo.c:502 plugins/sudoers/visudo.c:1056 toke.l:1031
-#: toke.l:1163 toke.l:1226 toke.l:1234
+#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:154
+#: plugins/sudoers/visudo.c:263 plugins/sudoers/visudo.c:388
+#: plugins/sudoers/visudo.c:394 plugins/sudoers/visudo.c:505
+#: plugins/sudoers/visudo.c:1065 plugins/sudoers/visudo.c:1086
+#: plugins/sudoers/visudo.c:1180 toke.l:1032 toke.l:1195 toke.l:1223
+#: toke.l:1288 toke.l:1299
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:303
+#: lib/eventlog/eventlog.c:304
 #, c-format
 msgid "unable to dup stdin: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:345
+#: lib/eventlog/eventlog.c:346
 #, c-format
 msgid "unable to execute %s: %m"
 msgstr ""
@@ -445,96 +462,96 @@ msgstr ""
 msgid "unable to open pipe: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:960
+#: lib/eventlog/eventlog.c:958
 #, c-format
 msgid "%8s : %s"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:989
+#: lib/eventlog/eventlog.c:987
 #, c-format
 msgid "%8s : (command continued) %s"
 msgstr ""
 
-#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1242
-#: plugins/sudoers/sudoreplay.c:1290 plugins/sudoers/sudoreplay.c:1586
-#, c-format
-msgid "invalid regular expression \"%s\": %s"
-msgstr ""
-
-#: lib/iolog/iolog_json.c:140
+#: lib/eventlog/parse_json.c:175
 #, c-format
 msgid "expected JSON_STRING, got %d"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:145
+#: lib/eventlog/parse_json.c:180
 msgid "JSON_ARRAY too large"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:404
+#: lib/eventlog/parse_json.c:494
 msgid "missing double quote in name"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:511
+#: lib/eventlog/parse_json.c:612
 msgid "missing JSON_OBJECT"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:515
+#: lib/eventlog/parse_json.c:616
 #, c-format
 msgid "expected JSON_OBJECT, got %d"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:632
+#: lib/eventlog/parse_json.c:750
 #, c-format
 msgid "json stack exhausted (max %u frames)"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:706
+#: lib/eventlog/parse_json.c:828
 msgid "objects must consist of name:value pairs"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:711 lib/iolog/iolog_json.c:742
-#: lib/iolog/iolog_json.c:786 lib/iolog/iolog_json.c:808
-#: lib/iolog/iolog_json.c:830 lib/iolog/iolog_json.c:852
-#: lib/iolog/iolog_json.c:874
+#: lib/eventlog/parse_json.c:833 lib/eventlog/parse_json.c:864
+#: lib/eventlog/parse_json.c:908 lib/eventlog/parse_json.c:930
+#: lib/eventlog/parse_json.c:952 lib/eventlog/parse_json.c:974
+#: lib/eventlog/parse_json.c:996
 msgid "missing separator between values"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:726 lib/iolog/iolog_json.c:900
+#: lib/eventlog/parse_json.c:848 lib/eventlog/parse_json.c:1022
 msgid "unmatched close brace"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:737
+#: lib/eventlog/parse_json.c:859
 msgid "unexpected array"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:757 lib/iolog/iolog_json.c:903
+#: lib/eventlog/parse_json.c:879 lib/eventlog/parse_json.c:1025
 msgid "unmatched close bracket"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:768
+#: lib/eventlog/parse_json.c:890
 msgid "unexpected string"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:779
+#: lib/eventlog/parse_json.c:901
 msgid "missing colon after name"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:800 lib/iolog/iolog_json.c:822
+#: lib/eventlog/parse_json.c:922 lib/eventlog/parse_json.c:944
 msgid "unexpected boolean"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:844
+#: lib/eventlog/parse_json.c:966
 msgid "unexpected null"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:865
+#: lib/eventlog/parse_json.c:987
 msgid "unexpected number"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:912
+#: lib/eventlog/parse_json.c:1033
 msgid "parse error"
 msgstr ""
 
+#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1241
+#: plugins/sudoers/sudoreplay.c:1290 plugins/sudoers/sudoreplay.c:1586
+#, c-format
+msgid "invalid regular expression \"%s\": %s"
+msgstr ""
+
 #: lib/iolog/iolog_legacy.c:65
 #, c-format
 msgid "%s: invalid log file"
@@ -571,13 +588,13 @@ msgid "%s exists but is not a directory (0%o)"
 msgstr ""
 
 #: lib/iolog/iolog_mkdirs.c:123 lib/iolog/iolog_mkdtemp.c:79
-#: logsrvd/iolog_writer.c:781 plugins/sudoers/timestamp.c:209
+#: logsrvd/iolog_writer.c:781 plugins/sudoers/timestamp.c:234
 #, c-format
 msgid "unable to mkdir %s"
 msgstr ""
 
-#: lib/iolog/iolog_mkdtemp.c:84 plugins/sudoers/visudo.c:757
-#: plugins/sudoers/visudo.c:791 plugins/sudoers/visudo.c:797
+#: lib/iolog/iolog_mkdtemp.c:84 plugins/sudoers/visudo.c:760
+#: plugins/sudoers/visudo.c:794 plugins/sudoers/visudo.c:800
 #, c-format
 msgid "unable to change mode of %s to 0%o"
 msgstr ""
@@ -609,8 +626,8 @@ msgstr ""
 msgid "%s: protocol error: NULL value found in %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:980
-#: plugins/sudoers/policy.c:593
+#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:993
+#: plugins/sudoers/policy.c:589
 msgid "unable to generate UUID"
 msgstr ""
 
@@ -662,26 +679,26 @@ msgstr ""
 msgid "invalid I/O log %s: %s referenced but not present"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:385
+#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:390
 #, c-format
 msgid "%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:428
+#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:433
 #: logsrvd/logsrvd_queue.c:115 logsrvd/tls_init.c:256
-#: plugins/sudoers/check.c:292 plugins/sudoers/cvtsudoers.c:730
-#: plugins/sudoers/cvtsudoers.c:751 plugins/sudoers/cvtsudoers.c:1431
-#: plugins/sudoers/cvtsudoers_csv.c:695 plugins/sudoers/cvtsudoers_json.c:898
-#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1152
-#: plugins/sudoers/sudoers.c:1182 plugins/sudoers/sudoreplay.c:1496
-#: plugins/sudoers/timestamp.c:460 plugins/sudoers/tsdump.c:128
-#: plugins/sudoers/visudo.c:975
+#: plugins/sudoers/check.c:292 plugins/sudoers/cvtsudoers.c:751
+#: plugins/sudoers/cvtsudoers.c:772 plugins/sudoers/cvtsudoers.c:1452
+#: plugins/sudoers/cvtsudoers_csv.c:697 plugins/sudoers/cvtsudoers_json.c:902
+#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1310
+#: plugins/sudoers/sudoers.c:1334 plugins/sudoers/sudoreplay.c:1496
+#: plugins/sudoers/timestamp.c:485 plugins/sudoers/tsdump.c:128
+#: plugins/sudoers/visudo.c:982
 #, c-format
 msgid "unable to open %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:797 logsrvd/logsrv_util.c:105
-#: logsrvd/logsrv_util.c:112 plugins/sudoers/sudoreplay.c:355
+#: logsrvd/iolog_writer.c:797 logsrvd/logsrv_util.c:111
+#: logsrvd/logsrv_util.c:118 plugins/sudoers/sudoreplay.c:355
 #: plugins/sudoers/sudoreplay.c:361
 #, c-format
 msgid "unable to open %s/%s"
@@ -697,17 +714,17 @@ msgstr ""
 msgid "unable to rename %s to %s"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:147 logsrvd/logsrv_util.c:176
+#: logsrvd/logsrv_util.c:153 logsrvd/logsrv_util.c:182
 #, c-format
 msgid "%s/%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:159
+#: logsrvd/logsrv_util.c:165
 #, c-format
 msgid "missing I/O log file %s/%s"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:166
+#: logsrvd/logsrv_util.c:172
 #, c-format
 msgid "%s/%s: unable to seek forward %zu"
 msgstr ""
@@ -716,31 +733,31 @@ msgstr ""
 msgid "unable to connect to relay"
 msgstr ""
 
-#: logsrvd/logsrvd.c:330 logsrvd/logsrvd_relay.c:842
+#: logsrvd/logsrvd.c:338 logsrvd/logsrvd_relay.c:844
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:422 logsrvd/logsrvd.c:545 logsrvd/logsrvd.c:631
-#: logsrvd/logsrvd.c:873 logsrvd/logsrvd.c:887 logsrvd/logsrvd.c:1049
-#: logsrvd/logsrvd.c:1174 logsrvd/logsrvd.c:1347 logsrvd/logsrvd.c:1365
-#: logsrvd/logsrvd.c:1464 logsrvd/logsrvd.c:1589 logsrvd/logsrvd.c:1773
-#: logsrvd/logsrvd_journal.c:497 logsrvd/logsrvd_local.c:238
+#: logsrvd/logsrvd.c:430 logsrvd/logsrvd.c:553 logsrvd/logsrvd.c:639
+#: logsrvd/logsrvd.c:881 logsrvd/logsrvd.c:895 logsrvd/logsrvd.c:1057
+#: logsrvd/logsrvd.c:1182 logsrvd/logsrvd.c:1355 logsrvd/logsrvd.c:1373
+#: logsrvd/logsrvd.c:1472 logsrvd/logsrvd.c:1597 logsrvd/logsrvd.c:1784
+#: logsrvd/logsrvd_journal.c:502 logsrvd/logsrvd_local.c:238
 #: logsrvd/logsrvd_queue.c:164 logsrvd/logsrvd_relay.c:172
 #: logsrvd/logsrvd_relay.c:249 logsrvd/logsrvd_relay.c:253
-#: logsrvd/logsrvd_relay.c:389 logsrvd/logsrvd_relay.c:581
-#: logsrvd/logsrvd_relay.c:742 logsrvd/logsrvd_relay.c:1131
-#: logsrvd/sendlog.c:1291 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
-#: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:278
-#: plugins/sudoers/iolog.c:1031 plugins/sudoers/iolog.c:1164
-#: plugins/sudoers/iolog.c:1262 plugins/sudoers/log_client.c:121
+#: logsrvd/logsrvd_relay.c:391 logsrvd/logsrvd_relay.c:583
+#: logsrvd/logsrvd_relay.c:744 logsrvd/logsrvd_relay.c:1133
+#: logsrvd/sendlog.c:1300 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
+#: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:277
+#: plugins/sudoers/iolog.c:1030 plugins/sudoers/iolog.c:1163
+#: plugins/sudoers/iolog.c:1261 plugins/sudoers/log_client.c:121
 #: plugins/sudoers/log_client.c:343 plugins/sudoers/log_client.c:359
-#: plugins/sudoers/log_client.c:407 plugins/sudoers/log_client.c:611
-#: plugins/sudoers/log_client.c:618 plugins/sudoers/log_client.c:1103
-#: plugins/sudoers/log_client.c:1384 plugins/sudoers/log_client.c:1425
-#: plugins/sudoers/log_client.c:1433 plugins/sudoers/log_client.c:1592
-#: plugins/sudoers/log_client.c:1710 plugins/sudoers/log_client.c:2039
-#: plugins/sudoers/log_client.c:2047 plugins/sudoers/logging.c:147
+#: plugins/sudoers/log_client.c:407 plugins/sudoers/log_client.c:613
+#: plugins/sudoers/log_client.c:620 plugins/sudoers/log_client.c:1111
+#: plugins/sudoers/log_client.c:1392 plugins/sudoers/log_client.c:1433
+#: plugins/sudoers/log_client.c:1441 plugins/sudoers/log_client.c:1600
+#: plugins/sudoers/log_client.c:1724 plugins/sudoers/log_client.c:2053
+#: plugins/sudoers/log_client.c:2061 plugins/sudoers/logging.c:147
 #: plugins/sudoers/logging.c:205 plugins/sudoers/sudoreplay.c:519
 #: plugins/sudoers/sudoreplay.c:566 plugins/sudoers/sudoreplay.c:808
 #: plugins/sudoers/sudoreplay.c:920 plugins/sudoers/sudoreplay.c:1011
@@ -750,189 +767,190 @@ msgstr ""
 msgid "unable to add event to queue"
 msgstr ""
 
-#: logsrvd/logsrvd.c:446 logsrvd/logsrvd.c:483 logsrvd/logsrvd.c:515
-#: logsrvd/logsrvd.c:569 logsrvd/logsrvd.c:648 logsrvd/logsrvd.c:684
-#: logsrvd/logsrvd.c:720 logsrvd/logsrvd.c:756 logsrvd/logsrvd_relay.c:510
-#: logsrvd/logsrvd_relay.c:543
+#: logsrvd/logsrvd.c:454 logsrvd/logsrvd.c:491 logsrvd/logsrvd.c:523
+#: logsrvd/logsrvd.c:577 logsrvd/logsrvd.c:656 logsrvd/logsrvd.c:692
+#: logsrvd/logsrvd.c:728 logsrvd/logsrvd.c:764 logsrvd/logsrvd_relay.c:512
+#: logsrvd/logsrvd_relay.c:545
 #, c-format
 msgid "unexpected state %d for %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:447 logsrvd/logsrvd.c:484 logsrvd/logsrvd.c:516
-#: logsrvd/logsrvd.c:570 logsrvd/logsrvd.c:649 logsrvd/logsrvd.c:685
-#: logsrvd/logsrvd.c:721 logsrvd/logsrvd.c:757 logsrvd/logsrvd_relay.c:512
-#: logsrvd/logsrvd_relay.c:545
+#: logsrvd/logsrvd.c:455 logsrvd/logsrvd.c:492 logsrvd/logsrvd.c:524
+#: logsrvd/logsrvd.c:578 logsrvd/logsrvd.c:657 logsrvd/logsrvd.c:693
+#: logsrvd/logsrvd.c:729 logsrvd/logsrvd.c:765 logsrvd/logsrvd_relay.c:514
+#: logsrvd/logsrvd_relay.c:547
 msgid "state machine error"
 msgstr ""
 
-#: logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:454
+#: logsrvd/logsrvd.c:461 logsrvd/logsrvd.c:462
 msgid "invalid AcceptMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:490 logsrvd/logsrvd.c:491
+#: logsrvd/logsrvd.c:498 logsrvd/logsrvd.c:499
 msgid "invalid RejectMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:522 logsrvd/logsrvd.c:523
+#: logsrvd/logsrvd.c:530 logsrvd/logsrvd.c:531
 msgid "invalid ExitMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:577
+#: logsrvd/logsrvd.c:584 logsrvd/logsrvd.c:585
 msgid "invalid RestartMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:611 logsrvd/logsrvd.c:612
+#: logsrvd/logsrvd.c:619 logsrvd/logsrvd.c:620
 msgid "invalid AlertMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:653 logsrvd/logsrvd.c:689 logsrvd/logsrvd.c:725
+#: logsrvd/logsrvd.c:661 logsrvd/logsrvd.c:697 logsrvd/logsrvd.c:733
 #, c-format
 msgid "%s: unexpected IoBuffer"
 msgstr ""
 
-#: logsrvd/logsrvd.c:654 logsrvd/logsrvd.c:690 logsrvd/logsrvd.c:726
+#: logsrvd/logsrvd.c:662 logsrvd/logsrvd.c:698 logsrvd/logsrvd.c:734
 msgid "protocol error"
 msgstr ""
 
-#: logsrvd/logsrvd.c:660 logsrvd/logsrvd.c:661
+#: logsrvd/logsrvd.c:668 logsrvd/logsrvd.c:669
 msgid "invalid IoBuffer"
 msgstr ""
 
-#: logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:697
+#: logsrvd/logsrvd.c:704 logsrvd/logsrvd.c:705
 msgid "invalid ChangeWindowSize"
 msgstr ""
 
-#: logsrvd/logsrvd.c:732 logsrvd/logsrvd.c:733
+#: logsrvd/logsrvd.c:740 logsrvd/logsrvd.c:741
 msgid "invalid CommandSuspend"
 msgstr ""
 
-#: logsrvd/logsrvd.c:782 logsrvd/logsrvd_journal.c:296
-#: logsrvd/logsrvd_relay.c:652 logsrvd/sendlog.c:1192
-#: plugins/sudoers/log_client.c:1582
+#: logsrvd/logsrvd.c:790 logsrvd/logsrvd_journal.c:301
+#: logsrvd/logsrvd_relay.c:654 logsrvd/sendlog.c:1201
+#: plugins/sudoers/log_client.c:1590
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:827 logsrvd/logsrvd_journal.c:370
-#: logsrvd/logsrvd_relay.c:676
+#: logsrvd/logsrvd.c:835 logsrvd/logsrvd_journal.c:375
+#: logsrvd/logsrvd_relay.c:678
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:829
+#: logsrvd/logsrvd.c:837
 msgid "unrecognized ClientMessage type"
 msgstr ""
 
-#: logsrvd/logsrvd.c:919
+#: logsrvd/logsrvd.c:927
 #, c-format
 msgid "timed out writing to client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:924 logsrvd/logsrvd_relay.c:914 logsrvd/sendlog.c:1395
+#: logsrvd/logsrvd.c:932 logsrvd/logsrvd_relay.c:916 logsrvd/sendlog.c:1404
 #, c-format
 msgid "missing write buffer for client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1020
+#: logsrvd/logsrvd.c:1028
 #, c-format
 msgid "timed out reading from client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1061 logsrvd/logsrvd_relay.c:777
+#: logsrvd/logsrvd.c:1069 logsrvd/logsrvd_relay.c:779
 #, c-format
 msgid "EOF from %s without proper TLS shutdown"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1105 logsrvd/logsrvd_relay.c:205 logsrvd/sendlog.c:322
-#: plugins/sudoers/log_client.c:721
+#: logsrvd/logsrvd.c:1113 logsrvd/logsrvd_relay.c:205 logsrvd/sendlog.c:331
+#: plugins/sudoers/log_client.c:723
 #, c-format
 msgid "client message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1106 logsrvd/logsrvd_journal.c:259
+#: logsrvd/logsrvd.c:1114 logsrvd/logsrvd_journal.c:259
 #: logsrvd/logsrvd_journal.c:260
 msgid "client message too large"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1124 logsrvd/logsrvd.c:1125
+#: logsrvd/logsrvd.c:1132 logsrvd/logsrvd.c:1133
 msgid "invalid ClientMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1425
+#: logsrvd/logsrvd.c:1433
 msgid "unable to get remote IP addr"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1456 logsrvd/tls_client.c:203
+#: logsrvd/logsrvd.c:1464 logsrvd/tls_client.c:203
 #: plugins/sudoers/log_client.c:281
 #, c-format
 msgid "Unable to attach user data to the ssl object: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1639 logsrvd/logsrvd.c:1992
+#: logsrvd/logsrvd.c:1647 logsrvd/logsrvd.c:2003
 msgid "unable to setup listen socket"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1756
+#: logsrvd/logsrvd.c:1767
 #, c-format
 msgid "unexpected signal %d"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1894
+#: logsrvd/logsrvd.c:1905
 msgid "sudo log server"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1896 logsrvd/sendlog.c:121
+#: logsrvd/logsrvd.c:1907 logsrvd/sendlog.c:121
 msgid "Options:"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1898
+#: logsrvd/logsrvd.c:1909
 msgid "path to configuration file"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1900 logsrvd/sendlog.c:123
+#: logsrvd/logsrvd.c:1911 logsrvd/sendlog.c:123
 msgid "display help message and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1902
+#: logsrvd/logsrvd.c:1913
 msgid "do not fork, run in the foreground"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1904
+#: logsrvd/logsrvd.c:1915
 msgid "percent chance connections will drop"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1906 logsrvd/sendlog.c:153
+#: logsrvd/logsrvd.c:1917 logsrvd/sendlog.c:153
 msgid "display version information and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1956 logsrvd/sendlog.c:1702
+#: logsrvd/logsrvd.c:1967 logsrvd/sendlog.c:1711
 msgid "Protobuf-C version 1.3 or higher required"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1972
+#: logsrvd/logsrvd.c:1983
 #, c-format
 msgid "invalid random drop value: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1975 logsrvd/sendlog.c:1756
-#: plugins/sudoers/cvtsudoers.c:246 plugins/sudoers/sudoreplay.c:294
-#: plugins/sudoers/visudo.c:182
+#: logsrvd/logsrvd.c:1986 logsrvd/sendlog.c:1765
+#: plugins/sudoers/cvtsudoers.c:247 plugins/sudoers/sudoreplay.c:294
+#: plugins/sudoers/visudo.c:186
 #, c-format
 msgid "%s version %s\n"
 msgstr ""
 
 #: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:358
 #: plugins/sudoers/exptilde.c:85 plugins/sudoers/iolog.c:122
-#: plugins/sudoers/policy.c:1271 plugins/sudoers/sudoers.c:512
-#: plugins/sudoers/sudoers.c:1411 plugins/sudoers/testsudoers.c:215
-#: plugins/sudoers/testsudoers.c:382
+#: plugins/sudoers/sudoers.c:448 plugins/sudoers/sudoers.c:939
+#: plugins/sudoers/sudoers.c:1041 plugins/sudoers/sudoers.c:1062
+#: plugins/sudoers/sudoers.c:1555 plugins/sudoers/testsudoers.c:224
+#: plugins/sudoers/testsudoers.c:393
 #, c-format
 msgid "unknown user %s"
 msgstr ""
 
 #: logsrvd/logsrvd_conf.c:439 plugins/sudoers/iolog.c:148
-#: plugins/sudoers/sudoers.c:517 plugins/sudoers/sudoers.c:1445
-#: plugins/sudoers/testsudoers.c:406
+#: plugins/sudoers/sudoers.c:453 plugins/sudoers/sudoers.c:1589
+#: plugins/sudoers/testsudoers.c:417
 #, c-format
 msgid "unknown group %s"
 msgstr ""
@@ -1004,8 +1022,8 @@ msgstr ""
 msgid "%s:%d [%s] illegal key: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:268
-#: plugins/sudoers/logging.c:1033
+#: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:269
+#: plugins/sudoers/logging.c:1046
 #, c-format
 msgid "unable to open log file %s"
 msgstr ""
@@ -1018,13 +1036,13 @@ msgstr ""
 msgid "unable to initialize relay TLS context"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:149 logsrvd/logsrvd_journal.c:424
-#: logsrvd/logsrvd_journal.c:429
+#: logsrvd/logsrvd_journal.c:149 logsrvd/logsrvd_journal.c:429
+#: logsrvd/logsrvd_journal.c:434
 msgid "unable to create journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:153 logsrvd/logsrvd_queue.c:109
-#: plugins/sudoers/visudo.c:1028
+#: plugins/sudoers/visudo.c:1038
 #, c-format
 msgid "unable to lock %s"
 msgstr ""
@@ -1037,8 +1055,8 @@ msgstr ""
 msgid "unable to open journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:185 logsrvd/logsrvd_journal.c:460
-#: logsrvd/logsrvd_journal.c:465
+#: logsrvd/logsrvd_journal.c:185 logsrvd/logsrvd_journal.c:465
+#: logsrvd/logsrvd_journal.c:470
 msgid "unable to write journal file"
 msgstr ""
 
@@ -1047,20 +1065,20 @@ msgid "unable to rename journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:247 logsrvd/logsrvd_journal.c:248
-#: logsrvd/logsrvd_journal.c:282 logsrvd/logsrvd_journal.c:283
+#: logsrvd/logsrvd_journal.c:287 logsrvd/logsrvd_journal.c:288
 msgid "unexpected EOF reading journal file"
 msgstr ""
 
 #: logsrvd/logsrvd_journal.c:251 logsrvd/logsrvd_journal.c:252
-#: logsrvd/logsrvd_journal.c:286 logsrvd/logsrvd_journal.c:287
+#: logsrvd/logsrvd_journal.c:291 logsrvd/logsrvd_journal.c:292
 msgid "error reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:298 logsrvd/logsrvd_journal.c:384
+#: logsrvd/logsrvd_journal.c:303 logsrvd/logsrvd_journal.c:389
 msgid "invalid journal file, unable to restart"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:443
+#: logsrvd/logsrvd_journal.c:448
 #, c-format
 msgid "unable to seek to [%lld, %ld] in journal file %s"
 msgstr ""
@@ -1118,7 +1136,7 @@ msgstr ""
 
 #: logsrvd/logsrvd_local.c:599 logsrvd/logsrvd_local.c:607
 #: logsrvd/logsrvd_local.c:655 logsrvd/logsrvd_local.c:690
-#: plugins/sudoers/sudoreplay.c:344
+#: plugins/sudoers/sudoreplay.c:344 toke.l:982 toke.l:985
 #, c-format
 msgid "%s/%s: %s"
 msgstr ""
@@ -1139,69 +1157,69 @@ msgstr ""
 msgid "error writing CommandSuspend"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:435
+#: logsrvd/logsrvd_relay.c:437
 msgid "TLS handshake with relay host failed"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:463
+#: logsrvd/logsrvd_relay.c:465
 msgid "unable to connect to relay host"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:518
+#: logsrvd/logsrvd_relay.c:520
 #, c-format
 msgid "%s: invalid ServerHello, missing server_id"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:520 logsrvd/sendlog.c:1096
-#: plugins/sudoers/log_client.c:1468
+#: logsrvd/logsrvd_relay.c:522 logsrvd/sendlog.c:1105
+#: plugins/sudoers/log_client.c:1476
 msgid "invalid ServerHello"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:679
+#: logsrvd/logsrvd_relay.c:681
 msgid "unrecognized ServerMessage type"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:708
+#: logsrvd/logsrvd_relay.c:710
 #, c-format
 msgid "timed out reading from relay %s (%s)"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:710
+#: logsrvd/logsrvd_relay.c:712
 msgid "timeout reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:762
+#: logsrvd/logsrvd_relay.c:764
 msgid "relay host name does not match certificate"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:768 logsrvd/logsrvd_relay.c:782
-#: logsrvd/logsrvd_relay.c:789
+#: logsrvd/logsrvd_relay.c:770 logsrvd/logsrvd_relay.c:784
+#: logsrvd/logsrvd_relay.c:791
 msgid "error reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:810
+#: logsrvd/logsrvd_relay.c:812
 msgid "unable to read from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:825 logsrvd/logsrvd_relay.c:943
+#: logsrvd/logsrvd_relay.c:827 logsrvd/logsrvd_relay.c:945
 msgid "relay server closed connection"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:843
+#: logsrvd/logsrvd_relay.c:845
 msgid "server message too large"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:907
+#: logsrvd/logsrvd_relay.c:909
 #, c-format
 msgid "timed out writing to relay %s (%s)"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:909
+#: logsrvd/logsrvd_relay.c:911
 msgid "timeout writing to relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:962 logsrvd/logsrvd_relay.c:969
-#: logsrvd/logsrvd_relay.c:981
+#: logsrvd/logsrvd_relay.c:964 logsrvd/logsrvd_relay.c:971
+#: logsrvd/logsrvd_relay.c:983
 msgid "error writing to relay"
 msgstr ""
 
@@ -1266,79 +1284,79 @@ msgstr ""
 msgid "unable to get server IP addr"
 msgstr ""
 
-#: logsrvd/sendlog.c:300 plugins/sudoers/sudoreplay.c:868
+#: logsrvd/sendlog.c:309 plugins/sudoers/sudoreplay.c:868
 #, c-format
 msgid "unable to read %s/%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1020 plugins/sudoers/iolog.c:949
-#: plugins/sudoers/iolog.c:1024
+#: logsrvd/sendlog.c:1029 plugins/sudoers/iolog.c:948
+#: plugins/sudoers/iolog.c:1023
 #, c-format
 msgid "unexpected I/O event %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1073 logsrvd/sendlog.c:1090 logsrvd/sendlog.c:1124
-#: plugins/sudoers/log_client.c:1118 plugins/sudoers/log_client.c:1394
-#: plugins/sudoers/log_client.c:1462 plugins/sudoers/log_client.c:1501
+#: logsrvd/sendlog.c:1082 logsrvd/sendlog.c:1099 logsrvd/sendlog.c:1133
+#: plugins/sudoers/log_client.c:1126 plugins/sudoers/log_client.c:1402
+#: plugins/sudoers/log_client.c:1470 plugins/sudoers/log_client.c:1509
 #, c-format
 msgid "%s: unexpected state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1160 plugins/sudoers/log_client.c:1550
+#: logsrvd/sendlog.c:1169 plugins/sudoers/log_client.c:1558
 #, c-format
 msgid "error message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1173 plugins/sudoers/log_client.c:1563
+#: logsrvd/sendlog.c:1182 plugins/sudoers/log_client.c:1571
 #, c-format
 msgid "abort message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1232 plugins/sudoers/log_client.c:1613
+#: logsrvd/sendlog.c:1241 plugins/sudoers/log_client.c:1621
 #, c-format
 msgid "%s: unexpected type_case value %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1261
+#: logsrvd/sendlog.c:1270
 msgid "timeout reading from server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1310 plugins/sudoers/log_client.c:1729
+#: logsrvd/sendlog.c:1319 plugins/sudoers/log_client.c:1743
 msgid "host name does not match certificate"
 msgstr ""
 
-#: logsrvd/sendlog.c:1343
+#: logsrvd/sendlog.c:1352
 msgid "premature EOF"
 msgstr ""
 
-#: logsrvd/sendlog.c:1356 plugins/sudoers/log_client.c:1776
+#: logsrvd/sendlog.c:1365 plugins/sudoers/log_client.c:1790
 #, c-format
 msgid "server message too large: %u"
 msgstr ""
 
-#: logsrvd/sendlog.c:1412
+#: logsrvd/sendlog.c:1421
 msgid "timeout writing to server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1779
+#: logsrvd/sendlog.c:1788
 msgid "both restart point and iolog ID must be specified"
 msgstr ""
 
-#: logsrvd/sendlog.c:1783
+#: logsrvd/sendlog.c:1792
 msgid "a restart point may not be set when no I/O is sent"
 msgstr ""
 
-#: logsrvd/sendlog.c:1859
+#: logsrvd/sendlog.c:1868
 #, c-format
 msgid "exited prematurely with state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1860
+#: logsrvd/sendlog.c:1869
 #, c-format
 msgid "elapsed time sent to server [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/sendlog.c:1862
+#: logsrvd/sendlog.c:1871
 #, c-format
 msgid "commit point received from server [%lld, %ld]"
 msgstr ""
@@ -1396,12 +1414,12 @@ msgstr ""
 msgid "unable to set minimum protocol version to TLS 1.2: %s"
 msgstr ""
 
-#: plugins/sudoers/audit.c:269 plugins/sudoers/audit.c:429
-#: plugins/sudoers/log_client.c:951 plugins/sudoers/log_client.c:1000
-#: plugins/sudoers/log_client.c:1049 plugins/sudoers/log_client.c:1174
-#: plugins/sudoers/logging.c:595 plugins/sudoers/logging.c:693
-#: plugins/sudoers/logging.c:796 plugins/sudoers/logging.c:987
-#: plugins/sudoers/policy.c:125
+#: plugins/sudoers/audit.c:268 plugins/sudoers/audit.c:428
+#: plugins/sudoers/log_client.c:959 plugins/sudoers/log_client.c:1008
+#: plugins/sudoers/log_client.c:1057 plugins/sudoers/log_client.c:1182
+#: plugins/sudoers/logging.c:595 plugins/sudoers/logging.c:711
+#: plugins/sudoers/logging.c:833 plugins/sudoers/logging.c:1000
+#: plugins/sudoers/policy.c:123
 msgid "unable to get time of day"
 msgstr ""
 
@@ -1410,28 +1428,28 @@ msgstr ""
 msgid "unable to change password for %s"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:74
+#: plugins/sudoers/auth/bsdauth.c:77
 #, c-format
 msgid "unable to get login class for user %s"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:79
-msgid "unable to begin bsd authentication"
+#: plugins/sudoers/auth/bsdauth.c:84
+msgid "invalid authentication type"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:87
-msgid "invalid authentication type"
+#: plugins/sudoers/auth/bsdauth.c:89
+msgid "unable to begin BSD authentication"
 msgstr ""
 
 #: plugins/sudoers/auth/bsdauth.c:96
 msgid "unable to initialize BSD authentication"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:186
+#: plugins/sudoers/auth/bsdauth.c:188
 msgid "your account has expired"
 msgstr ""
 
-#: plugins/sudoers/auth/bsdauth.c:188
+#: plugins/sudoers/auth/bsdauth.c:190
 msgid "approval failed"
 msgstr ""
 
@@ -1644,13 +1662,12 @@ msgid ""
 msgstr ""
 
 #: plugins/sudoers/check.c:353 plugins/sudoers/check.c:363
-#: plugins/sudoers/parse.c:82 plugins/sudoers/sudoers.c:945
-#: plugins/sudoers/sudoers.c:966 plugins/sudoers/tsdump.c:119
+#: plugins/sudoers/parse.c:80 plugins/sudoers/tsdump.c:119
 #, c-format
 msgid "unknown uid %u"
 msgstr ""
 
-#: plugins/sudoers/check_aliases.c:99 plugins/sudoers/defaults.c:1279
+#: plugins/sudoers/check_aliases.c:99 plugins/sudoers/defaults.c:1278
 #, c-format
 msgid "%s: %s\n"
 msgstr ""
@@ -1665,91 +1682,91 @@ msgstr ""
 msgid "%s \"%s\" referenced but not defined"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:209
+#: plugins/sudoers/cvtsudoers.c:210
 #, c-format
 msgid "order increment: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:228
+#: plugins/sudoers/cvtsudoers.c:229
 #, c-format
 msgid "starting order: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:238
+#: plugins/sudoers/cvtsudoers.c:239
 #, c-format
 msgid "order padding: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:248 plugins/sudoers/visudo.c:184
+#: plugins/sudoers/cvtsudoers.c:249 plugins/sudoers/visudo.c:188
 #, c-format
 msgid "%s grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:277 plugins/sudoers/testsudoers.c:159
+#: plugins/sudoers/cvtsudoers.c:278 plugins/sudoers/testsudoers.c:163
 #, c-format
 msgid "unsupported input format %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:295
+#: plugins/sudoers/cvtsudoers.c:296
 #, c-format
 msgid "unsupported output format %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:385
+#: plugins/sudoers/cvtsudoers.c:386
 #, c-format
 msgid "%s: input and output files must be different"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:399 plugins/sudoers/sudoers.c:166
-#: plugins/sudoers/sudoers.c:222 plugins/sudoers/testsudoers.c:254
-#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:654
+#: plugins/sudoers/cvtsudoers.c:400 plugins/sudoers/sudoers.c:163
+#: plugins/sudoers/sudoers.c:221 plugins/sudoers/testsudoers.c:263
+#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:657
 msgid "unable to initialize sudoers default values"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:525 plugins/sudoers/ldap_conf.c:434
+#: plugins/sudoers/cvtsudoers.c:526 plugins/sudoers/ldap_conf.c:431
 #, c-format
 msgid "%s: %s: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:584
+#: plugins/sudoers/cvtsudoers.c:605
 #, c-format
 msgid "%s: unknown key word %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:630
+#: plugins/sudoers/cvtsudoers.c:651
 #, c-format
 msgid "invalid defaults type: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:653
+#: plugins/sudoers/cvtsudoers.c:674
 #, c-format
 msgid "invalid suppression type: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:694 plugins/sudoers/cvtsudoers.c:710
+#: plugins/sudoers/cvtsudoers.c:715 plugins/sudoers/cvtsudoers.c:731
 #, c-format
 msgid "invalid filter: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:754 plugins/sudoers/visudo.c:982
+#: plugins/sudoers/cvtsudoers.c:775 plugins/sudoers/visudo.c:992
 #, c-format
 msgid "failed to parse %s file, unknown error"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1478 plugins/sudoers/sudoreplay.c:1142
-#: plugins/sudoers/timestamp.c:343 plugins/sudoers/timestamp.c:346
+#: plugins/sudoers/cvtsudoers.c:1499 plugins/sudoers/sudoreplay.c:1142
+#: plugins/sudoers/timestamp.c:368 plugins/sudoers/timestamp.c:371
 #, c-format
 msgid "unable to write to %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1506
+#: plugins/sudoers/cvtsudoers.c:1527
 #, c-format
 msgid ""
 "%s - convert between sudoers file formats\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1508
+#: plugins/sudoers/cvtsudoers.c:1529
 msgid ""
 "\n"
 "Options:\n"
@@ -1775,37 +1792,36 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_ldif.c:244 plugins/sudoers/cvtsudoers_ldif.c:251
 #: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:340
 #: plugins/sudoers/env.c:347 plugins/sudoers/env.c:458
-#: plugins/sudoers/ldap.c:528 plugins/sudoers/ldap.c:761
-#: plugins/sudoers/ldap.c:1134 plugins/sudoers/ldap_conf.c:222
-#: plugins/sudoers/ldap_conf.c:313 plugins/sudoers/ldap_util.c:486
+#: plugins/sudoers/ldap.c:509 plugins/sudoers/ldap.c:626
+#: plugins/sudoers/ldap.c:999 plugins/sudoers/ldap_conf.c:219
+#: plugins/sudoers/ldap_conf.c:310 plugins/sudoers/ldap_util.c:486
 #: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:461
-#: plugins/sudoers/logging.c:817 plugins/sudoers/logging.c:827
-#: plugins/sudoers/policy.c:807 plugins/sudoers/policy.c:818
+#: plugins/sudoers/policy.c:824 plugins/sudoers/policy.c:835
 #: plugins/sudoers/prompt.c:168 plugins/sudoers/serialize_list.c:62
 #: plugins/sudoers/serialize_list.c:71 plugins/sudoers/strvec_join.c:62
 #: plugins/sudoers/sudoreplay.c:1339 plugins/sudoers/sudoreplay.c:1345
-#: plugins/sudoers/sudoreplay.c:1351 plugins/sudoers/testsudoers.c:245
-#: plugins/sudoers/toke_util.c:213 toke.l:995 toke.l:1197
+#: plugins/sudoers/sudoreplay.c:1351 plugins/sudoers/testsudoers.c:254
+#: plugins/sudoers/toke_util.c:213 toke.l:996 toke.l:1259
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers_csv.c:452 plugins/sudoers/cvtsudoers_csv.c:466
-#: plugins/sudoers/cvtsudoers_json.c:657 plugins/sudoers/cvtsudoers_json.c:672
+#: plugins/sudoers/cvtsudoers_csv.c:454 plugins/sudoers/cvtsudoers_csv.c:468
+#: plugins/sudoers/cvtsudoers_json.c:661 plugins/sudoers/cvtsudoers_json.c:676
 #: plugins/sudoers/cvtsudoers_ldif.c:347 plugins/sudoers/cvtsudoers_ldif.c:360
-#: plugins/sudoers/ldap.c:512
+#: plugins/sudoers/ldap.c:493
 msgid "unable to get GMT time"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers_csv.c:457 plugins/sudoers/cvtsudoers_csv.c:471
-#: plugins/sudoers/cvtsudoers_json.c:662 plugins/sudoers/cvtsudoers_json.c:677
+#: plugins/sudoers/cvtsudoers_csv.c:459 plugins/sudoers/cvtsudoers_csv.c:473
+#: plugins/sudoers/cvtsudoers_json.c:666 plugins/sudoers/cvtsudoers_json.c:681
 #: plugins/sudoers/cvtsudoers_ldif.c:352 plugins/sudoers/cvtsudoers_ldif.c:365
-#: plugins/sudoers/ldap.c:520
+#: plugins/sudoers/ldap.c:501
 msgid "unable to format timestamp"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers_json.c:480 plugins/sudoers/cvtsudoers_json.c:515
-#: plugins/sudoers/cvtsudoers_json.c:728
+#: plugins/sudoers/cvtsudoers_json.c:481 plugins/sudoers/cvtsudoers_json.c:516
+#: plugins/sudoers/cvtsudoers_json.c:732
 #, c-format
 msgid "%s:%d:%d: unknown defaults entry \"%s\""
 msgstr ""
@@ -2630,18 +2646,18 @@ msgstr ""
 msgid "value \"%s\" is invalid for option \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1128 plugins/sudoers/policy.c:210
-#: plugins/sudoers/policy.c:219
+#: plugins/sudoers/defaults.c:1127 plugins/sudoers/policy.c:205
+#: plugins/sudoers/policy.c:214
 #, c-format
 msgid "path name for \"%s\" too long"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1134
+#: plugins/sudoers/defaults.c:1133
 #, c-format
 msgid "values for \"%s\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1141
+#: plugins/sudoers/defaults.c:1140
 #, c-format
 msgid "values for \"%s\" must start with a '/'"
 msgstr ""
@@ -2669,12 +2685,12 @@ msgid ""
 "sorry, you are not allowed to set the following environment variables: %s"
 msgstr ""
 
-#: plugins/sudoers/filedigest.c:49
+#: plugins/sudoers/filedigest.c:50
 #, c-format
-msgid "unsupported digest type %d for %s"
+msgid "unsupported digest type %u for %s"
 msgstr ""
 
-#: plugins/sudoers/filedigest.c:78
+#: plugins/sudoers/filedigest.c:79
 #, c-format
 msgid "%s: read error"
 msgstr ""
@@ -2708,82 +2724,82 @@ msgstr ""
 msgid "Local IP address and netmask pairs:\n"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:685
+#: plugins/sudoers/iolog.c:684
 msgid "unable to update sequence file"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:719 plugins/sudoers/iolog.c:907
-#: plugins/sudoers/iolog.c:1069 plugins/sudoers/iolog.c:1076
-#: plugins/sudoers/iolog.c:1197 plugins/sudoers/iolog.c:1204
-#: plugins/sudoers/iolog.c:1303 plugins/sudoers/iolog.c:1310
+#: plugins/sudoers/iolog.c:718 plugins/sudoers/iolog.c:906
+#: plugins/sudoers/iolog.c:1068 plugins/sudoers/iolog.c:1075
+#: plugins/sudoers/iolog.c:1196 plugins/sudoers/iolog.c:1203
+#: plugins/sudoers/iolog.c:1302 plugins/sudoers/iolog.c:1309
 #, c-format
 msgid "unable to write to I/O log file: %s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:727
+#: plugins/sudoers/iolog.c:726
 #, c-format
 msgid "unable to create %s/%s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:955
+#: plugins/sudoers/iolog.c:954
 #, c-format
 msgid "%s: internal error, I/O log file for event %d not open"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1054 plugins/sudoers/iolog.c:1182
-#: plugins/sudoers/iolog.c:1287 plugins/sudoers/timestamp.c:879
-#: plugins/sudoers/timestamp.c:971 plugins/sudoers/visudo.c:556
-#: plugins/sudoers/visudo.c:562
+#: plugins/sudoers/iolog.c:1053 plugins/sudoers/iolog.c:1181
+#: plugins/sudoers/iolog.c:1286 plugins/sudoers/timestamp.c:904
+#: plugins/sudoers/timestamp.c:996 plugins/sudoers/visudo.c:559
+#: plugins/sudoers/visudo.c:565
 msgid "unable to read the clock"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1279 plugins/sudoers/log_client.c:1192
-#: plugins/sudoers/log_client.c:1202 plugins/sudoers/log_client.c:1206
+#: plugins/sudoers/iolog.c:1278 plugins/sudoers/log_client.c:1200
+#: plugins/sudoers/log_client.c:1210 plugins/sudoers/log_client.c:1214
 #, c-format
 msgid "%s: internal error, invalid signal %d"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:177 plugins/sudoers/ldap_conf.c:292
+#: plugins/sudoers/ldap.c:154 plugins/sudoers/ldap_conf.c:289
 msgid "starttls not supported when using ldaps"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:248
+#: plugins/sudoers/ldap.c:225
 #, c-format
 msgid "unable to initialize SSL cert and key db: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:251
+#: plugins/sudoers/ldap.c:228
 #, c-format
 msgid "you must set TLS_CERT in %s to use SSL"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1714
+#: plugins/sudoers/ldap.c:1587
 #, c-format
 msgid "unable to initialize LDAP: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1751
+#: plugins/sudoers/ldap.c:1624
 msgid ""
 "start_tls specified but LDAP libs do not support ldap_start_tls_s() or "
 "ldap_start_tls_s_np()"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1888 plugins/sudoers/parse_ldif.c:748
+#: plugins/sudoers/ldap.c:1761 plugins/sudoers/parse_ldif.c:748
 #, c-format
 msgid "invalid sudoOrder attribute: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap_conf.c:200
+#: plugins/sudoers/ldap_conf.c:197
 #, c-format
 msgid "%s: port too large"
 msgstr ""
 
-#: plugins/sudoers/ldap_conf.c:261
+#: plugins/sudoers/ldap_conf.c:258
 #, c-format
 msgid "unsupported LDAP uri type: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap_conf.c:288
+#: plugins/sudoers/ldap_conf.c:285
 msgid "unable to mix ldap and ldaps URIs"
 msgstr ""
 
@@ -2809,7 +2825,7 @@ msgid "unable to send audit message"
 msgstr ""
 
 #: plugins/sudoers/log_client.c:125 plugins/sudoers/log_client.c:412
-#: plugins/sudoers/log_client.c:1439 plugins/sudoers/log_client.c:2055
+#: plugins/sudoers/log_client.c:1447 plugins/sudoers/log_client.c:2069
 msgid "error in event loop"
 msgstr ""
 
@@ -2843,28 +2859,28 @@ msgstr ""
 msgid "TLS connection to %s:%s failed: %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:543
+#: plugins/sudoers/log_client.c:545
 msgid "TLS initialization was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:553
+#: plugins/sudoers/log_client.c:555
 msgid "TLS handshake was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1210
+#: plugins/sudoers/log_client.c:1218
 #, c-format
 msgid "%s: internal error, invalid exit status %d"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1739 plugins/sudoers/log_client.c:1763
+#: plugins/sudoers/log_client.c:1753 plugins/sudoers/log_client.c:1777
 msgid "lost connection to log server"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1840
+#: plugins/sudoers/log_client.c:1854
 msgid "missing write buffer"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1994
+#: plugins/sudoers/log_client.c:2008
 msgid "unable to connect to log server"
 msgstr ""
 
@@ -2897,22 +2913,22 @@ msgstr ""
 
 #: plugins/sudoers/logging.c:324
 #, c-format
-msgid "Sorry, user %s is not allowed to execute '%s%s%s' as %s%s%s on %s.\n"
+msgid "Sorry, user %s is not allowed to execute '%s%s%s%s' as %s%s%s on %s.\n"
 msgstr ""
 
 #: plugins/sudoers/logging.c:334
 msgid "This incident has been reported to the administrator.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:369 plugins/sudoers/sudoers.c:655
-#: plugins/sudoers/sudoers.c:657 plugins/sudoers/sudoers.c:659
-#: plugins/sudoers/sudoers.c:661 plugins/sudoers/sudoers.c:816
-#: plugins/sudoers/sudoers.c:818
+#: plugins/sudoers/logging.c:369 plugins/sudoers/sudoers.c:566
+#: plugins/sudoers/sudoers.c:567 plugins/sudoers/sudoers.c:569
+#: plugins/sudoers/sudoers.c:570 plugins/sudoers/sudoers.c:791
+#: plugins/sudoers/sudoers.c:793
 #, c-format
 msgid "%s: command not found"
 msgstr ""
 
-#: plugins/sudoers/logging.c:371 plugins/sudoers/sudoers.c:651
+#: plugins/sudoers/logging.c:371 plugins/sudoers/sudoers.c:562
 #, c-format
 msgid ""
 "ignoring \"%s\" found in '.'\n"
@@ -2934,75 +2950,75 @@ msgstr ""
 msgid "a password is required"
 msgstr ""
 
-#: plugins/sudoers/logging.c:803 plugins/sudoers/logging.c:815
+#: plugins/sudoers/logging.c:855
 msgid "problem parsing sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:877 plugins/sudoers/logging.c:889
+#: plugins/sudoers/logging.c:896 plugins/sudoers/logging.c:904
 #, c-format
 msgid "%s:%d:%d: %s"
 msgstr ""
 
-#: plugins/sudoers/logging.c:1066
+#: plugins/sudoers/logging.c:1079
 #, c-format
 msgid "unable to write log file: %s"
 msgstr ""
 
-#: plugins/sudoers/match_digest.c:112
+#: plugins/sudoers/match_digest.c:101
 #, c-format
 msgid "digest for %s (%s) bad length %zu, expected %zu"
 msgstr ""
 
-#: plugins/sudoers/match_digest.c:131
+#: plugins/sudoers/match_digest.c:120
 #, c-format
 msgid "digest for %s (%s) is not in %s form"
 msgstr ""
 
-#: plugins/sudoers/parse.c:631
+#: plugins/sudoers/parse.c:643
 #, c-format
 msgid ""
 "\n"
 "LDAP Role: %s\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:634
+#: plugins/sudoers/parse.c:646
 msgid ""
 "\n"
 "Sudoers entry:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:636
+#: plugins/sudoers/parse.c:648
 msgid "    RunAsUsers: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:651
+#: plugins/sudoers/parse.c:663
 msgid "    RunAsGroups: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:661
+#: plugins/sudoers/parse.c:673
 msgid "    Options: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:725
+#: plugins/sudoers/parse.c:737
 msgid "    Commands:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:916
+#: plugins/sudoers/parse.c:928
 #, c-format
 msgid "Matching Defaults entries for %s on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:934
+#: plugins/sudoers/parse.c:946
 #, c-format
 msgid "Runas and Command-specific defaults for %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:952
+#: plugins/sudoers/parse.c:964
 #, c-format
 msgid "User %s may run the following commands on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:967
+#: plugins/sudoers/parse.c:979
 #, c-format
 msgid "User %s is not allowed to run sudo on %s.\n"
 msgstr ""
@@ -3017,91 +3033,99 @@ msgstr ""
 msgid "invalid LDIF attribute: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:82 plugins/sudoers/policy.c:113
+#: plugins/sudoers/pivot.c:74
+msgid "unable to restore root directory"
+msgstr ""
+
+#: plugins/sudoers/pivot.c:82
+msgid "unable to restore current working directory"
+msgstr ""
+
+#: plugins/sudoers/policy.c:80 plugins/sudoers/policy.c:111
 #, c-format
 msgid "invalid %.*s set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:360 plugins/sudoers/testsudoers.c:268
+#: plugins/sudoers/policy.c:356 plugins/sudoers/testsudoers.c:277
 msgid "unable to parse network address list"
 msgstr ""
 
-#: plugins/sudoers/policy.c:528
+#: plugins/sudoers/policy.c:524
 msgid "user name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:532
+#: plugins/sudoers/policy.c:528
 msgid "user-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:536
+#: plugins/sudoers/policy.c:532
 msgid "group-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:540
+#: plugins/sudoers/policy.c:536
 msgid "host name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:737
+#: plugins/sudoers/policy.c:754
 #, c-format
 msgid "invalid working directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:921
+#: plugins/sudoers/policy.c:938
 #, c-format
 msgid "invalid chroot directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1108 plugins/sudoers/visudo.c:259
-#: plugins/sudoers/visudo.c:906
+#: plugins/sudoers/policy.c:1125 plugins/sudoers/visudo.c:910
+#: plugins/sudoers/visudo.c:1209
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1178 plugins/sudoers/policy.c:1215
-#: plugins/sudoers/policy.c:1237 plugins/sudoers/policy.c:1263
+#: plugins/sudoers/policy.c:1195 plugins/sudoers/policy.c:1230
+#: plugins/sudoers/policy.c:1252 plugins/sudoers/policy.c:1274
 #, c-format
 msgid "%s: invalid mode flags from sudo front end: 0x%x"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1299
+#: plugins/sudoers/policy.c:1294
 #, c-format
 msgid "Sudoers policy plugin version %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1301
+#: plugins/sudoers/policy.c:1296
 #, c-format
 msgid "Sudoers file grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1305
+#: plugins/sudoers/policy.c:1300
 #, c-format
 msgid ""
 "\n"
 "Sudoers path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1308
+#: plugins/sudoers/policy.c:1303
 #, c-format
 msgid "nsswitch path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1310
+#: plugins/sudoers/policy.c:1305
 #, c-format
 msgid "ldap.conf path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1311
+#: plugins/sudoers/policy.c:1306
 #, c-format
 msgid "ldap.secret path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1344
+#: plugins/sudoers/policy.c:1339
 #, c-format
 msgid "unable to register hook of type %d (version %d.%d)"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1362
+#: plugins/sudoers/policy.c:1357
 #, c-format
 msgid "unable to deregister hook of type %d (version %d.%d)"
 msgstr ""
@@ -3170,48 +3194,48 @@ msgstr ""
 msgid "unable to parse gids for %s"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:114 plugins/sudoers/set_perms.c:445
-#: plugins/sudoers/set_perms.c:852 plugins/sudoers/set_perms.c:1162
-#: plugins/sudoers/set_perms.c:1460
+#: plugins/sudoers/set_perms.c:115 plugins/sudoers/set_perms.c:451
+#: plugins/sudoers/set_perms.c:863 plugins/sudoers/set_perms.c:1178
+#: plugins/sudoers/set_perms.c:1481
 msgid "perm stack overflow"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:125 plugins/sudoers/set_perms.c:376
-#: plugins/sudoers/set_perms.c:456 plugins/sudoers/set_perms.c:719
-#: plugins/sudoers/set_perms.c:863 plugins/sudoers/set_perms.c:1086
-#: plugins/sudoers/set_perms.c:1173 plugins/sudoers/set_perms.c:1393
-#: plugins/sudoers/set_perms.c:1471 plugins/sudoers/set_perms.c:1562
+#: plugins/sudoers/set_perms.c:126 plugins/sudoers/set_perms.c:382
+#: plugins/sudoers/set_perms.c:462 plugins/sudoers/set_perms.c:730
+#: plugins/sudoers/set_perms.c:874 plugins/sudoers/set_perms.c:1102
+#: plugins/sudoers/set_perms.c:1189 plugins/sudoers/set_perms.c:1414
+#: plugins/sudoers/set_perms.c:1492 plugins/sudoers/set_perms.c:1583
 msgid "perm stack underflow"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:185 plugins/sudoers/set_perms.c:503
-#: plugins/sudoers/set_perms.c:1227 plugins/sudoers/set_perms.c:1505
+#: plugins/sudoers/set_perms.c:186 plugins/sudoers/set_perms.c:509
+#: plugins/sudoers/set_perms.c:1243 plugins/sudoers/set_perms.c:1526
 msgid "unable to change to root gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:276 plugins/sudoers/set_perms.c:600
-#: plugins/sudoers/set_perms.c:995 plugins/sudoers/set_perms.c:1304
+#: plugins/sudoers/set_perms.c:277 plugins/sudoers/set_perms.c:606
+#: plugins/sudoers/set_perms.c:1006 plugins/sudoers/set_perms.c:1320
 msgid "unable to change to runas gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:281 plugins/sudoers/set_perms.c:605
-#: plugins/sudoers/set_perms.c:1000 plugins/sudoers/set_perms.c:1309
+#: plugins/sudoers/set_perms.c:282 plugins/sudoers/set_perms.c:611
+#: plugins/sudoers/set_perms.c:1011 plugins/sudoers/set_perms.c:1325
 msgid "unable to set runas group vector"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:292 plugins/sudoers/set_perms.c:616
-#: plugins/sudoers/set_perms.c:1009 plugins/sudoers/set_perms.c:1318
+#: plugins/sudoers/set_perms.c:293 plugins/sudoers/set_perms.c:622
+#: plugins/sudoers/set_perms.c:1020 plugins/sudoers/set_perms.c:1334
 msgid "unable to change to runas uid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:310 plugins/sudoers/set_perms.c:634
-#: plugins/sudoers/set_perms.c:1025 plugins/sudoers/set_perms.c:1334
+#: plugins/sudoers/set_perms.c:315 plugins/sudoers/set_perms.c:644
+#: plugins/sudoers/set_perms.c:1040 plugins/sudoers/set_perms.c:1354
 msgid "unable to change to sudoers gid"
 msgstr ""
 
-#: plugins/sudoers/set_perms.c:363 plugins/sudoers/set_perms.c:706
-#: plugins/sudoers/set_perms.c:1073 plugins/sudoers/set_perms.c:1380
-#: plugins/sudoers/set_perms.c:1549
+#: plugins/sudoers/set_perms.c:369 plugins/sudoers/set_perms.c:717
+#: plugins/sudoers/set_perms.c:1089 plugins/sudoers/set_perms.c:1401
+#: plugins/sudoers/set_perms.c:1570
 msgid "too many processes"
 msgstr ""
 
@@ -3240,150 +3264,150 @@ msgstr ""
 msgid "unable to find symbol \"%s\" in %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:263
+#: plugins/sudoers/sudoers.c:261
 #, c-format
 msgid "unable to get defaults from %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:270
+#: plugins/sudoers/sudoers.c:268
 msgid "no valid sudoers sources found, quitting"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:346
+#: plugins/sudoers/sudoers.c:344
 #, c-format
 msgid "user not allowed to change root directory to %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:348
+#: plugins/sudoers/sudoers.c:346
 #, c-format
 msgid "you are not permitted to use the -R option with %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:373
+#: plugins/sudoers/sudoers.c:371
 #, c-format
 msgid "user not allowed to change directory to %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:374
+#: plugins/sudoers/sudoers.c:372
 #, c-format
 msgid "you are not permitted to use the -D option with %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:401
-msgid "no command specified"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:426
+#: plugins/sudoers/sudoers.c:412
 msgid "sudoers specifies that root is not allowed to sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:483
+#: plugins/sudoers/sudoers.c:421
 msgid "user not allowed to override closefrom limit"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:484
+#: plugins/sudoers/sudoers.c:422
 msgid "you are not permitted to use the -C option"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:544
-#, c-format
-msgid "timestamp owner (%s): No such user"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:559
+#: plugins/sudoers/sudoers.c:468
 msgid "no tty"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:560
+#: plugins/sudoers/sudoers.c:469
 msgid "sorry, you must have a tty to run sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:567
+#: plugins/sudoers/sudoers.c:477
 #, c-format
 msgid "invalid shell for user %s: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:650
+#: plugins/sudoers/sudoers.c:561
 msgid "command in current directory"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:665
+#: plugins/sudoers/sudoers.c:574
 msgid "\"cd\" is a shell built-in command, it cannot be run directly."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:667
+#: plugins/sudoers/sudoers.c:576
 msgid "the -s option may be used to run a privileged shell."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:669
+#: plugins/sudoers/sudoers.c:578
 msgid "the -D option may be used to run a command in a specific directory."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:678
+#: plugins/sudoers/sudoers.c:587
 msgid "user not allowed to set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:680
+#: plugins/sudoers/sudoers.c:589
 msgid "sorry, you are not allowed set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:688
+#: plugins/sudoers/sudoers.c:597
 msgid "user not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:690
+#: plugins/sudoers/sudoers.c:599
 msgid "sorry, you are not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:799
+#: plugins/sudoers/sudoers.c:635
+msgid "no command specified"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:774
 msgid "error setting user-specified environment variables"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1112
+#: plugins/sudoers/sudoers.c:1239
 msgid "sudoedit doesn't need to be run via sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1157 plugins/sudoers/sudoreplay.c:1612
+#: plugins/sudoers/sudoers.c:1314 plugins/sudoers/sudoreplay.c:1612
 #: plugins/sudoers/tsdump.c:138
 #, c-format
 msgid "unable to read %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1186 plugins/sudoers/visudo.c:1066
+#: plugins/sudoers/sudoers.c:1337 plugins/sudoers/visudo.c:1114
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1190 plugins/sudoers/timestamp.c:263 toke.l:1255
+#: plugins/sudoers/sudoers.c:1341 plugins/sudoers/timestamp.c:288 toke.l:1325
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1194 plugins/sudoers/timestamp.c:270 toke.l:1260
+#: plugins/sudoers/sudoers.c:1345 plugins/sudoers/timestamp.c:295 toke.l:1330
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1198 plugins/sudoers/timestamp.c:275 toke.l:1263
+#: plugins/sudoers/sudoers.c:1349 plugins/sudoers/timestamp.c:300 toke.l:1333
 #, c-format
 msgid "%s is owned by gid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1233
+#: plugins/sudoers/sudoers.c:1377
 #, c-format
 msgid "only root can use \"-c %s\""
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1252
+#: plugins/sudoers/sudoers.c:1396
 #, c-format
 msgid "unknown login class %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1339 plugins/sudoers/sudoers.c:1354
+#: plugins/sudoers/sudoers.c:1483 plugins/sudoers/sudoers.c:1498
 #, c-format
 msgid "unable to resolve host %s"
 msgstr ""
 
+#: plugins/sudoers/sudoers.c:1636
+#, c-format
+msgid "%s:%d:%d timestampowner: unknown user %s"
+msgstr ""
+
 #: plugins/sudoers/sudoreplay.c:252
 #, c-format
 msgid "invalid filter option: %s"
@@ -3511,43 +3535,43 @@ msgid ""
 "  -V, --version          display version information and exit"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:344
+#: plugins/sudoers/testsudoers.c:355
 msgid "\thost  unmatched"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:347
+#: plugins/sudoers/testsudoers.c:358
 msgid ""
 "\n"
 "Command allowed"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:348
+#: plugins/sudoers/testsudoers.c:359
 msgid ""
 "\n"
 "Command denied"
 msgstr ""
 
-#: plugins/sudoers/testsudoers.c:348
+#: plugins/sudoers/testsudoers.c:359
 msgid ""
 "\n"
 "Command unmatched"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:354 plugins/sudoers/timestamp.c:693
+#: plugins/sudoers/timestamp.c:379 plugins/sudoers/timestamp.c:718
 #, c-format
 msgid "unable to truncate time stamp file to %lld bytes"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:890
+#: plugins/sudoers/timestamp.c:915
 msgid "ignoring time stamp from the future"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:913
+#: plugins/sudoers/timestamp.c:938
 #, c-format
 msgid "time stamp too far in the future: %20.20s"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:1042
+#: plugins/sudoers/timestamp.c:1067
 #, c-format
 msgid "unable to lock time stamp file %s"
 msgstr ""
@@ -3556,99 +3580,91 @@ msgstr ""
 msgid "sudoedit should not be specified with a path"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:254
-msgid "the -x option will be removed in a future release"
-msgstr ""
-
-#: plugins/sudoers/visudo.c:256
-msgid "please consider using the cvtsudoers utility instead"
-msgstr ""
-
-#: plugins/sudoers/visudo.c:311 plugins/sudoers/visudo.c:702
+#: plugins/sudoers/visudo.c:314 plugins/sudoers/visudo.c:705
 #, c-format
 msgid "press return to edit %s: "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:326
+#: plugins/sudoers/visudo.c:329
 #, c-format
 msgid "contents of edit session left in %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:403
+#: plugins/sudoers/visudo.c:406
 #, c-format
 msgid "specified editor (%s) doesn't exist"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:408
+#: plugins/sudoers/visudo.c:411
 #, c-format
 msgid "no editor found (editor path = %s)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:495 plugins/sudoers/visudo.c:774
+#: plugins/sudoers/visudo.c:498 plugins/sudoers/visudo.c:777
 #, c-format
 msgid "unable to stat %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:515 plugins/sudoers/visudo.c:523
+#: plugins/sudoers/visudo.c:518 plugins/sudoers/visudo.c:526
 msgid "write error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:569
+#: plugins/sudoers/visudo.c:572
 #, c-format
 msgid "unable to stat temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:576
+#: plugins/sudoers/visudo.c:579
 #, c-format
 msgid "zero length temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:582
+#: plugins/sudoers/visudo.c:585
 #, c-format
 msgid "editor (%s) failed, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:604
+#: plugins/sudoers/visudo.c:607
 #, c-format
 msgid "%s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:649
+#: plugins/sudoers/visudo.c:652
 #, c-format
 msgid "unable to re-open temporary file (%s), %s unchanged."
 msgstr ""
 
-#: plugins/sudoers/visudo.c:662
+#: plugins/sudoers/visudo.c:665
 #, c-format
 msgid "unable to parse temporary file (%s), unknown error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:748 plugins/sudoers/visudo.c:778
-#: plugins/sudoers/visudo.c:785
+#: plugins/sudoers/visudo.c:751 plugins/sudoers/visudo.c:781
+#: plugins/sudoers/visudo.c:788
 #, c-format
 msgid "unable to set (uid, gid) of %s to (%u, %u)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:813
+#: plugins/sudoers/visudo.c:816
 #, c-format
 msgid "%s and %s not on the same file system, using mv to rename"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:824
+#: plugins/sudoers/visudo.c:827
 #, c-format
 msgid "command failed: '%s %s %s', %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:831
+#: plugins/sudoers/visudo.c:834
 #, c-format
 msgid "error renaming %s, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:851
+#: plugins/sudoers/visudo.c:855
 msgid "What now? "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:865
+#: plugins/sudoers/visudo.c:869
 msgid ""
 "Options are:\n"
 "  (e)dit sudoers file again\n"
@@ -3656,48 +3672,56 @@ msgid ""
 "  (Q)uit and save changes to sudoers file (DANGER!)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:911
+#: plugins/sudoers/visudo.c:915
 #, c-format
 msgid "unable to run %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:942
+#: plugins/sudoers/visudo.c:946
 #, c-format
 msgid "%s: wrong owner (uid, gid) should be (%u, %u)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:953
+#: plugins/sudoers/visudo.c:957
 #, c-format
 msgid "%s: bad permissions, should be mode 0%o\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:999 plugins/sudoers/visudo.c:1006
+#: plugins/sudoers/visudo.c:1009 plugins/sudoers/visudo.c:1016
 #, c-format
 msgid "%s: parsed OK\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1025
+#: plugins/sudoers/visudo.c:1035
 #, c-format
 msgid "%s busy, try again later"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1029
+#: plugins/sudoers/visudo.c:1039
 msgid "Edit anyway? [y/N]"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1130
+#: plugins/sudoers/visudo.c:1197
+msgid "the -x option will be removed in a future release"
+msgstr ""
+
+#: plugins/sudoers/visudo.c:1199
+msgid "please consider using the cvtsudoers utility instead"
+msgstr ""
+
+#: plugins/sudoers/visudo.c:1219
 #, c-format
 msgid "Warning: %s:%d:%d: unused %s \"%s\""
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1242
+#: plugins/sudoers/visudo.c:1332
 #, c-format
 msgid ""
 "%s - safely edit the sudoers file\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1244
+#: plugins/sudoers/visudo.c:1334
 msgid ""
 "\n"
 "Options:\n"
@@ -3710,34 +3734,42 @@ msgid ""
 "  -V, --version            display version information and exit\n"
 msgstr ""
 
-#: toke.l:189
+#: toke.l:184
 msgid "empty string"
 msgstr ""
 
-#: toke.l:201 toke.l:571
+#: toke.l:196 toke.l:566
 msgid "empty group"
 msgstr ""
 
-#: toke.l:211 toke.l:569
+#: toke.l:206 toke.l:564
 msgid "empty netgroup"
 msgstr ""
 
-#: toke.l:289
+#: toke.l:284
 msgid "unterminated regular expression"
 msgstr ""
 
-#: toke.l:363 toke.l:375 toke.l:387 toke.l:403 toke.l:422 toke.l:462
+#: toke.l:358 toke.l:370 toke.l:382 toke.l:398 toke.l:417 toke.l:457
 msgid "invalid line continuation"
 msgstr ""
 
-#: toke.l:608 toke.l:620
+#: toke.l:603 toke.l:615
 msgid "invalid IPv6 address"
 msgstr ""
 
-#: toke.l:876
+#: toke.l:863
 msgid "unexpected line break in string"
 msgstr ""
 
-#: toke.l:1226
+#: toke.l:983
+msgid "ignoring editor backup file"
+msgstr ""
+
+#: toke.l:986
+msgid "ignoring file name containing '.'"
+msgstr ""
+
+#: toke.l:1289
 msgid "too many levels of includes"
 msgstr ""
diff --git a/po/sudo.pot b/po/sudo.pot
index 58a85cae2..5734b57ee 100644
--- a/po/sudo.pot
+++ b/po/sudo.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.13\n"
+"Project-Id-Version: sudo 1.9.14\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2023-01-24 13:11-0700\n"
+"POT-Creation-Date: 2023-06-07 13:27-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -31,73 +31,76 @@ msgstr ""
 
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/gidlist.c:76
 #: lib/util/json.c:55 lib/util/json.c:197 lib/util/sudo_conf.c:215
-#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:646
-#: src/conversation.c:80 src/exec_iolog.c:124 src/exec_iolog.c:135
-#: src/exec_iolog.c:212 src/exec_monitor.c:205 src/exec_monitor.c:460
-#: src/exec_monitor.c:466 src/exec_monitor.c:474 src/exec_monitor.c:482
-#: src/exec_monitor.c:489 src/exec_monitor.c:496 src/exec_monitor.c:503
-#: src/exec_monitor.c:510 src/exec_monitor.c:517 src/exec_monitor.c:524
-#: src/exec_monitor.c:531 src/exec_nopty.c:231 src/exec_nopty.c:240
+#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:647
+#: src/conversation.c:78 src/exec_iolog.c:122 src/exec_iolog.c:133
+#: src/exec_iolog.c:210 src/exec_monitor.c:171 src/exec_monitor.c:418
+#: src/exec_monitor.c:424 src/exec_monitor.c:432 src/exec_monitor.c:440
+#: src/exec_monitor.c:447 src/exec_monitor.c:454 src/exec_monitor.c:461
+#: src/exec_monitor.c:468 src/exec_monitor.c:475 src/exec_monitor.c:482
+#: src/exec_monitor.c:489 src/exec_nopty.c:231 src/exec_nopty.c:240
 #: src/exec_nopty.c:247 src/exec_nopty.c:254 src/exec_nopty.c:261
 #: src/exec_nopty.c:268 src/exec_nopty.c:275 src/exec_nopty.c:282
 #: src/exec_nopty.c:289 src/exec_nopty.c:296 src/exec_nopty.c:303
 #: src/exec_nopty.c:310 src/exec_nopty.c:318 src/exec_nopty.c:326
-#: src/exec_nopty.c:736 src/exec_preload.c:343 src/exec_ptrace.c:475
-#: src/exec_ptrace.c:768 src/exec_ptrace.c:983 src/exec_ptrace.c:1095
-#: src/exec_ptrace.c:1270 src/exec_ptrace.c:1612 src/exec_ptrace.c:1639
-#: src/exec_pty.c:511 src/exec_pty.c:692 src/exec_pty.c:882 src/exec_pty.c:891
-#: src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912 src/exec_pty.c:919
-#: src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940 src/exec_pty.c:947
-#: src/exec_pty.c:954 src/exec_pty.c:962 src/load_plugins.c:98
-#: src/load_plugins.c:123 src/load_plugins.c:159 src/load_plugins.c:392
-#: src/load_plugins.c:398 src/parse_args.c:172 src/parse_args.c:193
-#: src/parse_args.c:267 src/parse_args.c:623 src/parse_args.c:645
-#: src/parse_args.c:670 src/preserve_fds.c:46 src/preserve_fds.c:131
-#: src/selinux.c:89 src/selinux.c:362 src/selinux.c:472 src/selinux.c:489
-#: src/selinux.c:496 src/sesh.c:206 src/sesh.c:240 src/sesh.c:246
-#: src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:641 src/sudo.c:706
-#: src/sudo.c:716 src/sudo.c:743 src/sudo.c:766 src/sudo.c:775 src/sudo.c:784
-#: src/sudo.c:801 src/sudo.c:842 src/sudo.c:851 src/sudo.c:861 src/sudo.c:894
-#: src/sudo.c:1122 src/sudo.c:1143 src/sudo.c:1436 src/sudo.c:1605
-#: src/sudo.c:1832 src/sudo.c:2166 src/sudo_edit.c:89 src/sudo_edit.c:149
-#: src/sudo_edit.c:429 src/sudo_edit.c:438 src/sudo_edit.c:538
-#: src/sudo_edit.c:545 src/sudo_edit.c:688 src/sudo_edit.c:708
-#: src/sudo_intercept_common.c:115 src/sudo_intercept_common.c:340
+#: src/exec_nopty.c:744 src/exec_preload.c:343 src/exec_ptrace.c:475
+#: src/exec_ptrace.c:768 src/exec_ptrace.c:983 src/exec_ptrace.c:1096
+#: src/exec_ptrace.c:1271 src/exec_ptrace.c:1624 src/exec_ptrace.c:1651
+#: src/exec_ptrace.c:1841 src/exec_pty.c:581 src/exec_pty.c:765
+#: src/exec_pty.c:963 src/exec_pty.c:972 src/exec_pty.c:979 src/exec_pty.c:986
+#: src/exec_pty.c:993 src/exec_pty.c:1000 src/exec_pty.c:1007
+#: src/exec_pty.c:1014 src/exec_pty.c:1021 src/exec_pty.c:1028
+#: src/exec_pty.c:1035 src/exec_pty.c:1042 src/exec_pty.c:1050
+#: src/load_plugins.c:100 src/load_plugins.c:125 src/load_plugins.c:161
+#: src/load_plugins.c:394 src/load_plugins.c:400 src/parse_args.c:172
+#: src/parse_args.c:193 src/parse_args.c:269 src/parse_args.c:625
+#: src/parse_args.c:647 src/parse_args.c:672 src/preserve_fds.c:46
+#: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
+#: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:240
+#: src/sesh.c:246 src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:644
+#: src/sudo.c:709 src/sudo.c:719 src/sudo.c:746 src/sudo.c:769 src/sudo.c:778
+#: src/sudo.c:787 src/sudo.c:805 src/sudo.c:846 src/sudo.c:855 src/sudo.c:865
+#: src/sudo.c:898 src/sudo.c:1127 src/sudo.c:1148 src/sudo.c:1441
+#: src/sudo.c:1610 src/sudo.c:1837 src/sudo.c:2171 src/sudo_edit.c:89
+#: src/sudo_edit.c:149 src/sudo_edit.c:430 src/sudo_edit.c:439
+#: src/sudo_edit.c:540 src/sudo_edit.c:547 src/sudo_edit.c:692
+#: src/sudo_edit.c:712 src/sudo_intercept_common.c:115
+#: src/sudo_intercept_common.c:340
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/json.c:56
 #: lib/util/json.c:198 lib/util/regex.c:173 lib/util/sudo_conf.c:216
-#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:646
-#: src/conversation.c:81 src/exec_intercept.c:111 src/exec_intercept.c:344
-#: src/exec_intercept.c:518 src/exec_intercept.c:582 src/exec_intercept.c:706
-#: src/exec_intercept.c:830 src/exec_iolog.c:124 src/exec_iolog.c:135
-#: src/exec_iolog.c:212 src/exec_monitor.c:460 src/exec_monitor.c:466
-#: src/exec_monitor.c:474 src/exec_monitor.c:482 src/exec_monitor.c:489
-#: src/exec_monitor.c:496 src/exec_monitor.c:503 src/exec_monitor.c:510
-#: src/exec_monitor.c:517 src/exec_monitor.c:524 src/exec_monitor.c:531
+#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:647
+#: src/conversation.c:79 src/exec_intercept.c:111 src/exec_intercept.c:350
+#: src/exec_intercept.c:525 src/exec_intercept.c:589 src/exec_intercept.c:713
+#: src/exec_intercept.c:837 src/exec_iolog.c:122 src/exec_iolog.c:133
+#: src/exec_iolog.c:210 src/exec_monitor.c:418 src/exec_monitor.c:424
+#: src/exec_monitor.c:432 src/exec_monitor.c:440 src/exec_monitor.c:447
+#: src/exec_monitor.c:454 src/exec_monitor.c:461 src/exec_monitor.c:468
+#: src/exec_monitor.c:475 src/exec_monitor.c:482 src/exec_monitor.c:489
 #: src/exec_nopty.c:231 src/exec_nopty.c:240 src/exec_nopty.c:247
 #: src/exec_nopty.c:254 src/exec_nopty.c:261 src/exec_nopty.c:268
 #: src/exec_nopty.c:275 src/exec_nopty.c:282 src/exec_nopty.c:289
 #: src/exec_nopty.c:296 src/exec_nopty.c:303 src/exec_nopty.c:310
 #: src/exec_nopty.c:318 src/exec_nopty.c:326 src/exec_preload.c:343
 #: src/exec_ptrace.c:475 src/exec_ptrace.c:768 src/exec_ptrace.c:983
-#: src/exec_ptrace.c:1639 src/exec_pty.c:511 src/exec_pty.c:882
-#: src/exec_pty.c:891 src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912
-#: src/exec_pty.c:919 src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940
-#: src/exec_pty.c:947 src/exec_pty.c:954 src/exec_pty.c:962
-#: src/load_plugins.c:98 src/load_plugins.c:123 src/load_plugins.c:159
-#: src/load_plugins.c:392 src/load_plugins.c:398 src/parse_args.c:172
-#: src/parse_args.c:194 src/parse_args.c:267 src/parse_args.c:623
-#: src/parse_args.c:645 src/parse_args.c:670 src/preserve_fds.c:46
+#: src/exec_ptrace.c:1651 src/exec_ptrace.c:1842 src/exec_pty.c:581
+#: src/exec_pty.c:963 src/exec_pty.c:972 src/exec_pty.c:979 src/exec_pty.c:986
+#: src/exec_pty.c:993 src/exec_pty.c:1000 src/exec_pty.c:1007
+#: src/exec_pty.c:1014 src/exec_pty.c:1021 src/exec_pty.c:1028
+#: src/exec_pty.c:1035 src/exec_pty.c:1042 src/exec_pty.c:1050
+#: src/load_plugins.c:100 src/load_plugins.c:125 src/load_plugins.c:161
+#: src/load_plugins.c:394 src/load_plugins.c:400 src/parse_args.c:172
+#: src/parse_args.c:194 src/parse_args.c:269 src/parse_args.c:625
+#: src/parse_args.c:647 src/parse_args.c:672 src/preserve_fds.c:46
 #: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
 #: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:471
-#: src/sudo.c:230 src/sudo.c:641 src/sudo.c:894 src/sudo.c:1122 src/sudo.c:1143
-#: src/sudo.c:1436 src/sudo.c:1605 src/sudo.c:1832 src/sudo.c:2166
-#: src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:429
-#: src/sudo_edit.c:438 src/sudo_edit.c:538 src/sudo_edit.c:545
-#: src/sudo_edit.c:688 src/sudo_edit.c:708 src/sudo_intercept_common.c:115
+#: src/sudo.c:228 src/sudo.c:644 src/sudo.c:898 src/sudo.c:1127 src/sudo.c:1148
+#: src/sudo.c:1441 src/sudo.c:1610 src/sudo.c:1837 src/sudo.c:2171
+#: src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:430
+#: src/sudo_edit.c:439 src/sudo_edit.c:540 src/sudo_edit.c:547
+#: src/sudo_edit.c:692 src/sudo_edit.c:712 src/sudo_intercept_common.c:115
 #: src/sudo_intercept_common.c:340
 msgid "unable to allocate memory"
 msgstr ""
@@ -112,9 +115,9 @@ msgstr ""
 msgid "%.*s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:666
-#: lib/util/sudo_conf.c:696 lib/util/sudo_conf.c:703 src/selinux.c:235
-#: src/selinux.c:265 src/sudo.c:373 src/sudo_edit.c:494 src/sudo_edit.c:557
+#: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:664
+#: lib/util/sudo_conf.c:683 lib/util/sudo_conf.c:710 src/selinux.c:235
+#: src/selinux.c:265 src/sudo.c:373 src/sudo_edit.c:495 src/sudo_edit.c:559
 #, c-format
 msgid "unable to open %s"
 msgstr ""
@@ -170,22 +173,22 @@ msgstr ""
 msgid "invalid max groups \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:669
+#: lib/util/sudo_conf.c:686
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: lib/util/sudo_conf.c:672 src/copy_file.c:164
+#: lib/util/sudo_conf.c:689 src/copy_file.c:164
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:676
+#: lib/util/sudo_conf.c:693
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: lib/util/sudo_conf.c:679
+#: lib/util/sudo_conf.c:696
 #, c-format
 msgid "%s is group writable"
 msgstr ""
@@ -234,7 +237,7 @@ msgstr ""
 msgid "%s: bad file mode: 0%o"
 msgstr ""
 
-#: src/edit_open.c:331
+#: src/edit_open.c:333
 msgid "unable to restore current working directory"
 msgstr ""
 
@@ -279,18 +282,18 @@ msgstr ""
 msgid "starting from %s"
 msgstr ""
 
-#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:569 src/exec_monitor.c:571
-#: src/exec_pty.c:225 src/exec_pty.c:1026 src/exec_pty.c:1028 src/signal.c:144
-#: src/signal.c:151 src/signal.c:165 src/suspend_nopty.c:93
+#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:552 src/exec_monitor.c:554
+#: src/exec_pty.c:1122 src/exec_pty.c:1124 src/signal.c:144 src/signal.c:151
+#: src/signal.c:165 src/suspend_parent.c:143
 #, c-format
 msgid "unable to set handler for signal %d"
 msgstr ""
 
-#: src/exec.c:422
+#: src/exec.c:424
 msgid "intercept mode is not supported with SELinux RBAC on this system"
 msgstr ""
 
-#: src/exec.c:427
+#: src/exec.c:429
 msgid "unable to log sub-commands with SELinux RBAC on this system"
 msgstr ""
 
@@ -298,239 +301,257 @@ msgstr ""
 msgid "unable to remove PRIV_PROC_EXEC from PRIV_LIMIT"
 msgstr ""
 
-#: src/exec_intercept.c:70 src/exec_iolog.c:165 src/exec_iolog.c:175
-#: src/exec_iolog.c:220 src/exec_iolog.c:227 src/exec_iolog.c:254
-#: src/exec_monitor.c:468 src/exec_monitor.c:476 src/exec_monitor.c:484
-#: src/exec_monitor.c:491 src/exec_monitor.c:498 src/exec_monitor.c:505
-#: src/exec_monitor.c:512 src/exec_monitor.c:519 src/exec_monitor.c:526
-#: src/exec_monitor.c:533 src/exec_nopty.c:233 src/exec_nopty.c:242
+#: src/exec_intercept.c:70 src/exec_iolog.c:163 src/exec_iolog.c:173
+#: src/exec_iolog.c:218 src/exec_iolog.c:225 src/exec_iolog.c:252
+#: src/exec_monitor.c:426 src/exec_monitor.c:434 src/exec_monitor.c:442
+#: src/exec_monitor.c:449 src/exec_monitor.c:456 src/exec_monitor.c:463
+#: src/exec_monitor.c:470 src/exec_monitor.c:477 src/exec_monitor.c:484
+#: src/exec_monitor.c:491 src/exec_nopty.c:233 src/exec_nopty.c:242
 #: src/exec_nopty.c:249 src/exec_nopty.c:256 src/exec_nopty.c:263
 #: src/exec_nopty.c:270 src/exec_nopty.c:277 src/exec_nopty.c:284
 #: src/exec_nopty.c:291 src/exec_nopty.c:298 src/exec_nopty.c:305
 #: src/exec_nopty.c:312 src/exec_nopty.c:320 src/exec_nopty.c:328
-#: src/exec_nopty.c:387 src/exec_nopty.c:453 src/exec_pty.c:360
-#: src/exec_pty.c:462 src/exec_pty.c:517 src/exec_pty.c:884 src/exec_pty.c:893
-#: src/exec_pty.c:900 src/exec_pty.c:907 src/exec_pty.c:914 src/exec_pty.c:921
-#: src/exec_pty.c:928 src/exec_pty.c:935 src/exec_pty.c:942 src/exec_pty.c:949
-#: src/exec_pty.c:956
+#: src/exec_nopty.c:387 src/exec_nopty.c:457 src/exec_pty.c:432
+#: src/exec_pty.c:537 src/exec_pty.c:587 src/exec_pty.c:965 src/exec_pty.c:974
+#: src/exec_pty.c:981 src/exec_pty.c:988 src/exec_pty.c:995 src/exec_pty.c:1002
+#: src/exec_pty.c:1009 src/exec_pty.c:1016 src/exec_pty.c:1023
+#: src/exec_pty.c:1030 src/exec_pty.c:1037 src/exec_pty.c:1044
 msgid "unable to add event to queue"
 msgstr ""
 
-#: src/exec_intercept.c:317 src/sudo.c:1028
+#: src/exec_intercept.c:323 src/sudo.c:1033
 msgid "command not set by the security policy"
 msgstr ""
 
-#: src/exec_intercept.c:395 src/exec_intercept.c:435 src/sudo.c:1248
-#: src/sudo.c:1293 src/sudo.c:1337
+#: src/exec_intercept.c:401 src/exec_intercept.c:441 src/sudo.c:1253
+#: src/sudo.c:1298 src/sudo.c:1342
 msgid "command rejected by policy"
 msgstr ""
 
-#: src/exec_intercept.c:505 src/sudo.c:1935
+#: src/exec_intercept.c:512 src/sudo.c:1940
 msgid "approval plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:530 src/sudo.c:1253 src/sudo.c:1298 src/sudo.c:1342
-#: src/sudo.c:1416
+#: src/exec_intercept.c:537 src/sudo.c:1258 src/sudo.c:1303 src/sudo.c:1347
+#: src/sudo.c:1421
 msgid "policy plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:559
+#: src/exec_intercept.c:566
 msgid "invalid PolicyCheckRequest"
 msgstr ""
 
-#: src/exec_intercept.c:702
+#: src/exec_intercept.c:709
 #, c-format
 msgid "client request too large: %zu"
 msgstr ""
 
-#: src/exec_intercept.c:744
+#: src/exec_intercept.c:751
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: src/exec_intercept.c:792
+#: src/exec_intercept.c:799
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: src/exec_intercept.c:818
+#: src/exec_intercept.c:825
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
 
-#: src/exec_iolog.c:323 src/exec_iolog.c:363 src/exec_iolog.c:403
-#: src/exec_iolog.c:454 src/exec_iolog.c:505
+#: src/exec_iolog.c:321 src/exec_iolog.c:361 src/exec_iolog.c:401
+#: src/exec_iolog.c:452 src/exec_iolog.c:503
 msgid "I/O plugin error"
 msgstr ""
 
-#: src/exec_iolog.c:327 src/exec_iolog.c:367 src/exec_iolog.c:407
-#: src/exec_iolog.c:458 src/exec_iolog.c:509
+#: src/exec_iolog.c:325 src/exec_iolog.c:365 src/exec_iolog.c:405
+#: src/exec_iolog.c:456 src/exec_iolog.c:507
 msgid "command rejected by I/O plugin"
 msgstr ""
 
-#: src/exec_iolog.c:556
+#: src/exec_iolog.c:555
 msgid "error logging suspend"
 msgstr ""
 
-#: src/exec_iolog.c:591
+#: src/exec_iolog.c:590
 msgid "error changing window size"
 msgstr ""
 
-#: src/exec_monitor.c:362
+#: src/exec_monitor.c:328
 msgid "error reading from socketpair"
 msgstr ""
 
-#: src/exec_monitor.c:379
+#: src/exec_monitor.c:340
 #, c-format
 msgid "unexpected reply type on backchannel: %d"
 msgstr ""
 
-#: src/exec_monitor.c:587
+#: src/exec_monitor.c:566
 msgid "unable to set controlling tty"
 msgstr ""
 
-#: src/exec_monitor.c:595 src/exec_nopty.c:498 src/exec_nopty.c:508
-#: src/exec_nopty.c:518 src/exec_nopty.c:552 src/exec_pty.c:1097
-#: src/exec_pty.c:1118 src/exec_pty.c:1138 src/tgetpass.c:305
+#: src/exec_monitor.c:574 src/exec_nopty.c:504 src/exec_nopty.c:514
+#: src/exec_nopty.c:524 src/exec_nopty.c:560 src/exec_pty.c:1195
+#: src/exec_pty.c:1222 src/exec_pty.c:1242 src/exec_pty.c:1262
+#: src/tgetpass.c:306
 msgid "unable to create pipe"
 msgstr ""
 
-#: src/exec_monitor.c:605
+#: src/exec_monitor.c:584
 msgid "unable to receive message from parent"
 msgstr ""
 
-#: src/exec_monitor.c:621 src/exec_nopty.c:595 src/exec_pty.c:1176
-#: src/sudo_edit.c:361 src/tgetpass.c:309
+#: src/exec_monitor.c:600 src/exec_nopty.c:603 src/exec_pty.c:1303
+#: src/sudo_edit.c:361 src/tgetpass.c:310
 msgid "unable to fork"
 msgstr ""
 
-#: src/exec_monitor.c:625 src/exec_monitor.c:723 src/exec_nopty.c:700
+#: src/exec_monitor.c:604 src/exec_monitor.c:700 src/exec_nopty.c:708
 msgid "unable to restore tty label"
 msgstr ""
 
-#: src/exec_monitor.c:638 src/sesh.c:217 src/sudo.c:1199
+#: src/exec_monitor.c:615 src/sesh.c:217 src/sudo.c:1204
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: src/exec_nopty.c:546 src/exec_pty.c:1035
+#: src/exec_nopty.c:554 src/exec_pty.c:1131
 msgid "policy plugin failed session initialization"
 msgstr ""
 
-#: src/exec_nopty.c:561 src/exec_pty.c:1004 src/exec_pty.c:1013
+#: src/exec_nopty.c:569 src/exec_pty.c:1100 src/exec_pty.c:1109
 msgid "unable to create sockets"
 msgstr ""
 
-#: src/exec_nopty.c:688 src/exec_pty.c:1274
+#: src/exec_nopty.c:696 src/exec_pty.c:1406
 msgid "error in event loop"
 msgstr ""
 
 #: src/exec_preload.c:167 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
-#: src/net_ifs.c:620 src/net_ifs.c:851 src/sudo.c:488 src/sudo_edit.c:398
+#: src/net_ifs.c:620 src/net_ifs.c:852 src/sudo.c:488 src/sudo_edit.c:398
 #: src/sudo_edit.c:406
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
-#: src/exec_ptrace.c:1079 src/exec_ptrace.c:1104 src/exec_ptrace.c:1900
+#: src/exec_ptrace.c:1080 src/exec_ptrace.c:1105 src/exec_ptrace.c:1925
 #, c-format
 msgid "unable to set registers for process %d"
 msgstr ""
 
-#: src/exec_ptrace.c:1099 src/exec_ptrace.c:1274 src/exec_ptrace.c:1616
+#: src/exec_ptrace.c:1100 src/exec_ptrace.c:1275 src/exec_ptrace.c:1628
 #, c-format
 msgid "process %d exited unexpectedly"
 msgstr ""
 
-#: src/exec_ptrace.c:1208
+#: src/exec_ptrace.c:1209
 msgid "unable to set seccomp filter"
 msgstr ""
 
-#: src/exec_ptrace.c:1405
+#: src/exec_ptrace.c:1406
 #, c-format
 msgid "interpreter argument , expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1504
+#: src/exec_ptrace.c:1505
 #, c-format
 msgid "pathname mismatch, expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1513 src/exec_ptrace.c:1520 src/exec_ptrace.c:1533
-#: src/exec_ptrace.c:1541 src/exec_ptrace.c:1547 src/exec_ptrace.c:1553
+#: src/exec_ptrace.c:1514 src/exec_ptrace.c:1521 src/exec_ptrace.c:1545
+#: src/exec_ptrace.c:1553 src/exec_ptrace.c:1559 src/exec_ptrace.c:1565
 #, c-format
 msgid "%s[%d] mismatch, expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1620
+#: src/exec_ptrace.c:1632
 #, c-format
 msgid "process %d unexpected status 0x%x"
 msgstr ""
 
-#: src/exec_ptrace.c:1711
+#: src/exec_ptrace.c:1723
 #, c-format
 msgid "unable to get event message for process %d"
 msgstr ""
 
-#: src/exec_ptrace.c:1718
+#: src/exec_ptrace.c:1730
 #, c-format
 msgid "unable to get registers for process %d"
 msgstr ""
 
-#: src/exec_pty.c:103
+#: src/exec_pty.c:84
 msgid "unable to allocate pty"
 msgstr ""
 
-#: src/exec_pty.c:268 src/signal.c:101 src/suspend_nopty.c:99
-#, c-format
-msgid "unable to restore handler for signal %d"
+#: src/exec_pty.c:131 src/exec_pty.c:284 src/tgetpass.c:251
+msgid "unable to restore terminal settings"
 msgstr ""
 
-#: src/exec_pty.c:1222
+#: src/exec_pty.c:243
+msgid "unable to set handler for SIGCONT"
+msgstr ""
+
+#: src/exec_pty.c:293
+#, c-format
+msgid "unable to set handler for SIG%s"
+msgstr ""
+
+#: src/exec_pty.c:317
+#, c-format
+msgid "unable to restore handler for SIG%s"
+msgstr ""
+
+#: src/exec_pty.c:345
+msgid "unable to restore handler for SIGCONT"
+msgstr ""
+
+#: src/exec_pty.c:1353
 msgid "unable to send message to monitor process"
 msgstr ""
 
-#: src/load_plugins.c:73 src/load_plugins.c:220 src/load_plugins.c:230
-#: src/load_plugins.c:240 src/load_plugins.c:287
+#: src/load_plugins.c:75 src/load_plugins.c:222 src/load_plugins.c:232
+#: src/load_plugins.c:242 src/load_plugins.c:289
 #, c-format
 msgid "error in %s, line %d while loading plugin \"%s\""
 msgstr ""
 
-#: src/load_plugins.c:184 src/load_plugins.c:255
+#: src/load_plugins.c:186 src/load_plugins.c:257
 #, c-format
 msgid "ignoring duplicate plugin \"%s\" in %s, line %d"
 msgstr ""
 
-#: src/load_plugins.c:222
+#: src/load_plugins.c:224
 #, c-format
 msgid "unable to load %s: %s"
 msgstr ""
 
-#: src/load_plugins.c:232
+#: src/load_plugins.c:234
 #, c-format
 msgid "unable to find symbol \"%s\" in %s"
 msgstr ""
 
-#: src/load_plugins.c:242
+#: src/load_plugins.c:244
 #, c-format
 msgid "incompatible plugin major version %d (expected %d) found in %s"
 msgstr ""
 
-#: src/load_plugins.c:260
+#: src/load_plugins.c:262
 #, c-format
 msgid "ignoring policy plugin \"%s\" in %s, line %d"
 msgstr ""
 
-#: src/load_plugins.c:263
+#: src/load_plugins.c:265
 msgid "only a single policy plugin may be specified"
 msgstr ""
 
-#: src/load_plugins.c:289
+#: src/load_plugins.c:291
 #, c-format
 msgid "unknown plugin type %d found in %s"
 msgstr ""
 
-#: src/load_plugins.c:472
+#: src/load_plugins.c:474
 #, c-format
 msgid "policy plugin %s does not include a check_policy method"
 msgstr ""
@@ -540,194 +561,194 @@ msgstr ""
 msgid "invalid environment variable name: %s"
 msgstr ""
 
-#: src/parse_args.c:317
+#: src/parse_args.c:319
 msgid "the argument to -C must be a number greater than or equal to 3"
 msgstr ""
 
-#: src/parse_args.c:554
+#: src/parse_args.c:556
 msgid "you may not specify both the -i and -s options"
 msgstr ""
 
-#: src/parse_args.c:559
+#: src/parse_args.c:561
 msgid "you may not specify both the -i and -E options"
 msgstr ""
 
-#: src/parse_args.c:569
+#: src/parse_args.c:571
 msgid "the -E option is not valid in edit mode"
 msgstr ""
 
-#: src/parse_args.c:572
+#: src/parse_args.c:574
 msgid "you may not specify environment variables in edit mode"
 msgstr ""
 
-#: src/parse_args.c:582
+#: src/parse_args.c:584
 msgid "the -U option may only be used with the -l option"
 msgstr ""
 
-#: src/parse_args.c:586
+#: src/parse_args.c:588
 msgid "the -A and -S options may not be used together"
 msgstr ""
 
-#: src/parse_args.c:684
+#: src/parse_args.c:686
 msgid "sudoedit is not supported on this platform"
 msgstr ""
 
-#: src/parse_args.c:767
+#: src/parse_args.c:744
 msgid ""
 "Only one of the -e, -h, -i, -K, -l, -s, -v or -V options may be specified"
 msgstr ""
 
-#: src/parse_args.c:780
+#: src/parse_args.c:757
 msgid "Only one of the -K, -k or -N options may be specified"
 msgstr ""
 
-#: src/parse_args.c:796
+#: src/parse_args.c:778
 #, c-format
 msgid ""
 "%s - edit files as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:798
+#: src/parse_args.c:780
 #, c-format
 msgid ""
 "%s - execute a command as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:804
+#: src/parse_args.c:785
 msgid ""
 "\n"
 "Options:\n"
 msgstr ""
 
-#: src/parse_args.c:806
+#: src/parse_args.c:787
 msgid "use a helper program for password prompting"
 msgstr ""
 
-#: src/parse_args.c:809
+#: src/parse_args.c:790
 msgid "use specified BSD authentication type"
 msgstr ""
 
-#: src/parse_args.c:813
+#: src/parse_args.c:794
 msgid "run command in the background"
 msgstr ""
 
-#: src/parse_args.c:816
+#: src/parse_args.c:797
 msgid "ring bell when prompting"
 msgstr ""
 
-#: src/parse_args.c:818
+#: src/parse_args.c:799
 msgid "close all file descriptors >= num"
 msgstr ""
 
-#: src/parse_args.c:821
+#: src/parse_args.c:802
 msgid "run command with the specified BSD login class"
 msgstr ""
 
-#: src/parse_args.c:824
+#: src/parse_args.c:805
 msgid "change the working directory before running command"
 msgstr ""
 
-#: src/parse_args.c:827
+#: src/parse_args.c:808
 msgid "preserve user environment when running command"
 msgstr ""
 
-#: src/parse_args.c:829
+#: src/parse_args.c:810
 msgid "preserve specific environment variables"
 msgstr ""
 
-#: src/parse_args.c:831
+#: src/parse_args.c:812
 msgid "edit files instead of running a command"
 msgstr ""
 
-#: src/parse_args.c:834
+#: src/parse_args.c:815
 msgid "run command as the specified group name or ID"
 msgstr ""
 
-#: src/parse_args.c:837
+#: src/parse_args.c:818
 msgid "set HOME variable to target user's home dir"
 msgstr ""
 
-#: src/parse_args.c:840
+#: src/parse_args.c:821
 msgid "display help message and exit"
 msgstr ""
 
-#: src/parse_args.c:842
+#: src/parse_args.c:823
 msgid "run command on host (if supported by plugin)"
 msgstr ""
 
-#: src/parse_args.c:845
+#: src/parse_args.c:826
 msgid "run login shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:847
+#: src/parse_args.c:828
 msgid "remove timestamp file completely"
 msgstr ""
 
-#: src/parse_args.c:850
+#: src/parse_args.c:831
 msgid "invalidate timestamp file"
 msgstr ""
 
-#: src/parse_args.c:853
+#: src/parse_args.c:834
 msgid ""
 "list user's privileges or check a specific command; use twice for longer "
 "format"
 msgstr ""
 
-#: src/parse_args.c:856
+#: src/parse_args.c:837
 msgid "non-interactive mode, no prompts are used"
 msgstr ""
 
-#: src/parse_args.c:859
+#: src/parse_args.c:840
 msgid "preserve group vector instead of setting to target's"
 msgstr ""
 
-#: src/parse_args.c:862
+#: src/parse_args.c:843
 msgid "use the specified password prompt"
 msgstr ""
 
-#: src/parse_args.c:864
+#: src/parse_args.c:845
 msgid "change the root directory before running command"
 msgstr ""
 
-#: src/parse_args.c:867
+#: src/parse_args.c:848
 msgid "create SELinux security context with specified role"
 msgstr ""
 
-#: src/parse_args.c:870
+#: src/parse_args.c:851
 msgid "read password from standard input"
 msgstr ""
 
-#: src/parse_args.c:873
+#: src/parse_args.c:854
 msgid "run shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:877
+#: src/parse_args.c:858
 msgid "create SELinux security context with specified type"
 msgstr ""
 
-#: src/parse_args.c:880
+#: src/parse_args.c:861
 msgid "terminate command after the specified time limit"
 msgstr ""
 
-#: src/parse_args.c:883
+#: src/parse_args.c:864
 msgid "in list mode, display privileges for user"
 msgstr ""
 
-#: src/parse_args.c:886
+#: src/parse_args.c:867
 msgid "run command (or edit file) as specified user name or ID"
 msgstr ""
 
-#: src/parse_args.c:888
+#: src/parse_args.c:869
 msgid "display version information and exit"
 msgstr ""
 
-#: src/parse_args.c:891
+#: src/parse_args.c:872
 msgid "update user's timestamp without running a command"
 msgstr ""
 
-#: src/parse_args.c:894
+#: src/parse_args.c:875
 msgid "stop processing command line arguments"
 msgstr ""
 
@@ -871,6 +892,11 @@ msgstr ""
 msgid "unable to save handler for signal %d"
 msgstr ""
 
+#: src/signal.c:101 src/suspend_parent.c:149
+#, c-format
+msgid "unable to restore handler for signal %d"
+msgstr ""
+
 #: src/solaris.c:72
 msgid "resource control limit has been reached"
 msgstr ""
@@ -914,21 +940,21 @@ msgstr ""
 msgid "warning, resource control assignment failed for project \"%s\""
 msgstr ""
 
-#: src/sudo.c:216
+#: src/sudo.c:214
 #, c-format
 msgid "Sudo version %s\n"
 msgstr ""
 
-#: src/sudo.c:218
+#: src/sudo.c:216
 #, c-format
 msgid "Configure options: %s\n"
 msgstr ""
 
-#: src/sudo.c:226
+#: src/sudo.c:224
 msgid "fatal error, unable to load plugins"
 msgstr ""
 
-#: src/sudo.c:272
+#: src/sudo.c:270
 msgid "plugin did not return a command to execute"
 msgstr ""
 
@@ -937,134 +963,134 @@ msgstr ""
 msgid "unexpected sudo mode 0x%x"
 msgstr ""
 
-#: src/sudo.c:555
+#: src/sudo.c:559
 #, c-format
 msgid "you do not exist in the %s database"
 msgstr ""
 
-#: src/sudo.c:612
+#: src/sudo.c:616
 msgid "unable to determine tty"
 msgstr ""
 
-#: src/sudo.c:928
+#: src/sudo.c:932
 msgid ""
 "The \"no new privileges\" flag is set, which prevents sudo from running as "
 "root."
 msgstr ""
 
-#: src/sudo.c:930
+#: src/sudo.c:934
 msgid ""
 "If sudo is running in a container, you may need to adjust the container "
 "configuration to disable the flag."
 msgstr ""
 
-#: src/sudo.c:964
+#: src/sudo.c:968
 #, c-format
 msgid "%s must be owned by uid %d and have the setuid bit set"
 msgstr ""
 
-#: src/sudo.c:967
+#: src/sudo.c:971
 #, c-format
 msgid ""
 "effective uid is not %d, is %s on a file system with the 'nosuid' option set "
 "or an NFS file system without root privileges?"
 msgstr ""
 
-#: src/sudo.c:973
+#: src/sudo.c:977
 #, c-format
 msgid "effective uid is not %d, is sudo installed setuid root?"
 msgstr ""
 
-#: src/sudo.c:989 src/tgetpass.c:331
+#: src/sudo.c:993 src/tgetpass.c:332
 msgid "unable to set supplementary group IDs"
 msgstr ""
 
-#: src/sudo.c:996
+#: src/sudo.c:1000
 #, c-format
 msgid "unable to set effective gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1002
+#: src/sudo.c:1006
 #, c-format
 msgid "unable to set gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1032
+#: src/sudo.c:1037
 msgid "argv not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1036
+#: src/sudo.c:1041
 msgid "envp not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1058
+#: src/sudo.c:1063
 #, c-format
 msgid "unexpected child termination condition: %d"
 msgstr ""
 
-#: src/sudo.c:1171
+#: src/sudo.c:1176
 msgid "unable to initialize policy plugin"
 msgstr ""
 
-#: src/sudo.c:1233
+#: src/sudo.c:1238
 #, c-format
 msgid "policy plugin %s is missing the \"check_policy\" method"
 msgstr ""
 
-#: src/sudo.c:1279
+#: src/sudo.c:1284
 #, c-format
 msgid "policy plugin %s does not support listing privileges"
 msgstr ""
 
-#: src/sudo.c:1323
+#: src/sudo.c:1328
 #, c-format
 msgid "policy plugin %s does not support the -v option"
 msgstr ""
 
-#: src/sudo.c:1361
+#: src/sudo.c:1366
 #, c-format
 msgid "policy plugin %s does not support the -k/-K options"
 msgstr ""
 
-#: src/sudo.c:1490
+#: src/sudo.c:1495
 #, c-format
 msgid "error initializing I/O plugin %s"
 msgstr ""
 
-#: src/sudo.c:1493
+#: src/sudo.c:1498
 msgid "error initializing I/O plugin"
 msgstr ""
 
-#: src/sudo.c:1642
+#: src/sudo.c:1647
 #, c-format
 msgid "error initializing audit plugin %s"
 msgstr ""
 
-#: src/sudo.c:1721
+#: src/sudo.c:1726
 #, c-format
 msgid "%s: unable to log error event%s%s"
 msgstr ""
 
-#: src/sudo.c:1757
+#: src/sudo.c:1762
 #, c-format
 msgid "%s: unable to log accept event%s%s"
 msgstr ""
 
-#: src/sudo.c:1762 src/sudo.c:1800
+#: src/sudo.c:1767 src/sudo.c:1805
 msgid "audit plugin error"
 msgstr ""
 
-#: src/sudo.c:1795
+#: src/sudo.c:1800
 #, c-format
 msgid "%s: unable to log reject event%s%s"
 msgstr ""
 
-#: src/sudo.c:1855
+#: src/sudo.c:1860
 #, c-format
 msgid "error initializing approval plugin %s"
 msgstr ""
 
-#: src/sudo.c:1925
+#: src/sudo.c:1930
 msgid "command rejected by approver"
 msgstr ""
 
@@ -1072,56 +1098,56 @@ msgstr ""
 msgid "no writable temporary directory found"
 msgstr ""
 
-#: src/sudo_edit.c:291
+#: src/sudo_edit.c:292
 #, c-format
 msgid "%s left unmodified"
 msgstr ""
 
-#: src/sudo_edit.c:304 src/sudo_edit.c:569
+#: src/sudo_edit.c:305 src/sudo_edit.c:571
 #, c-format
 msgid "%s unchanged"
 msgstr ""
 
-#: src/sudo_edit.c:481
+#: src/sudo_edit.c:482
 msgid "sesh: internal error: odd number of paths"
 msgstr ""
 
-#: src/sudo_edit.c:483
+#: src/sudo_edit.c:484
 msgid "sesh: unable to create temporary files"
 msgstr ""
 
-#: src/sudo_edit.c:485 src/sudo_edit.c:604
+#: src/sudo_edit.c:486 src/sudo_edit.c:606
 msgid "sesh: killed by a signal"
 msgstr ""
 
-#: src/sudo_edit.c:487 src/sudo_edit.c:607
+#: src/sudo_edit.c:488 src/sudo_edit.c:609
 #, c-format
 msgid "sesh: unknown error %d"
 msgstr ""
 
-#: src/sudo_edit.c:597
+#: src/sudo_edit.c:599
 msgid "unable to copy temporary files back to their original location"
 msgstr ""
 
-#: src/sudo_edit.c:601
+#: src/sudo_edit.c:603
 msgid ""
 "unable to copy some of the temporary files back to their original location"
 msgstr ""
 
-#: src/sudo_edit.c:646
+#: src/sudo_edit.c:650
 #, c-format
 msgid "unable to change uid to root (%u)"
 msgstr ""
 
-#: src/sudo_edit.c:660
+#: src/sudo_edit.c:664
 msgid "plugin error: invalid file list for sudoedit"
 msgstr ""
 
-#: src/sudo_edit.c:681
+#: src/sudo_edit.c:685
 msgid "plugin error: missing file list for sudoedit"
 msgstr ""
 
-#: src/sudo_edit.c:724 src/sudo_edit.c:739
+#: src/sudo_edit.c:728 src/sudo_edit.c:743
 msgid "unable to read the clock"
 msgstr ""
 
@@ -1151,29 +1177,29 @@ msgstr ""
 msgid "no askpass program specified, try setting SUDO_ASKPASS"
 msgstr ""
 
-#: src/tgetpass.c:326
+#: src/tgetpass.c:327
 #, c-format
 msgid "unable to set gid to %u"
 msgstr ""
 
-#: src/tgetpass.c:336
+#: src/tgetpass.c:337
 #, c-format
 msgid "unable to set uid to %u"
 msgstr ""
 
-#: src/tgetpass.c:341
+#: src/tgetpass.c:342
 #, c-format
 msgid "unable to run %s"
 msgstr ""
 
-#: src/utmp.c:288
+#: src/utmp.c:283
 msgid "unable to save stdin"
 msgstr ""
 
-#: src/utmp.c:290
+#: src/utmp.c:285
 msgid "unable to dup2 stdin"
 msgstr ""
 
-#: src/utmp.c:293
+#: src/utmp.c:288
 msgid "unable to restore stdin"
 msgstr ""