From 3b205bc4120f5635d79a534258f0927df034db42 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Mon, 10 Oct 2022 09:13:22 -0600
Subject: [PATCH] Update .pot files for 1.9.12

---
 plugins/sudoers/po/sudoers.pot | 1503 +++++++++++++++++---------------
 po/sudo.pot                    |  756 ++++++++--------
 2 files changed, 1178 insertions(+), 1081 deletions(-)

diff --git a/plugins/sudoers/po/sudoers.pot b/plugins/sudoers/po/sudoers.pot
index ad07ede53..964702913 100644
--- a/plugins/sudoers/po/sudoers.pot
+++ b/plugins/sudoers/po/sudoers.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.11\n"
+"Project-Id-Version: sudo 1.9.12\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2022-05-27 08:39-0600\n"
+"POT-Creation-Date: 2022-10-10 09:13-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
 
-#: confstr.sh:1 gram.y:1218
+#: confstr.sh:1 gram.y:1220 plugins/sudoers/logging.c:862
 msgid "syntax error"
 msgstr ""
 
@@ -41,13 +41,13 @@ msgstr ""
 msgid "Sorry, try again."
 msgstr ""
 
-#: gram.y:236 gram.y:303 gram.y:312 gram.y:321 gram.y:331 gram.y:341 gram.y:365
-#: gram.y:392 gram.y:401 gram.y:409 gram.y:418 gram.y:427 gram.y:501 gram.y:511
-#: gram.y:523 gram.y:571 gram.y:580 gram.y:589 gram.y:598 gram.y:730 gram.y:738
-#: gram.y:749 gram.y:761 gram.y:780 gram.y:943 gram.y:948 gram.y:956 gram.y:970
-#: gram.y:976 gram.y:1098 gram.y:1107 gram.y:1115 gram.y:1124 gram.y:1133
-#: gram.y:1162 gram.y:1171 gram.y:1179 gram.y:1272 gram.y:1402 gram.y:1769
-#: gram.y:1816 lib/eventlog/eventlog.c:309 lib/eventlog/eventlog.c:382
+#: gram.y:237 gram.y:304 gram.y:313 gram.y:322 gram.y:332 gram.y:342 gram.y:366
+#: gram.y:393 gram.y:402 gram.y:410 gram.y:419 gram.y:428 gram.y:502 gram.y:512
+#: gram.y:524 gram.y:572 gram.y:581 gram.y:590 gram.y:599 gram.y:731 gram.y:739
+#: gram.y:750 gram.y:762 gram.y:781 gram.y:944 gram.y:949 gram.y:957 gram.y:971
+#: gram.y:977 gram.y:1099 gram.y:1108 gram.y:1116 gram.y:1125 gram.y:1134
+#: gram.y:1163 gram.y:1172 gram.y:1180 gram.y:1280 gram.y:1410 gram.y:1777
+#: gram.y:1827 lib/eventlog/eventlog.c:309 lib/eventlog/eventlog.c:382
 #: lib/eventlog/eventlog.c:827 lib/eventlog/eventlog.c:904
 #: lib/eventlog/eventlog.c:1204 lib/iolog/iolog_filter.c:142
 #: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:233
@@ -56,30 +56,43 @@ msgstr ""
 #: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
 #: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
 #: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
-#: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:84
-#: logsrvd/iolog_writer.c:89 logsrvd/iolog_writer.c:123
-#: logsrvd/iolog_writer.c:172 logsrvd/iolog_writer.c:212
-#: logsrvd/iolog_writer.c:225 logsrvd/iolog_writer.c:261
-#: logsrvd/iolog_writer.c:286 logsrvd/iolog_writer.c:301
-#: logsrvd/iolog_writer.c:314 logsrvd/iolog_writer.c:327
-#: logsrvd/iolog_writer.c:340 logsrvd/iolog_writer.c:355
-#: logsrvd/iolog_writer.c:393 logsrvd/iolog_writer.c:399
-#: logsrvd/iolog_writer.c:406 logsrvd/iolog_writer.c:412
-#: logsrvd/iolog_writer.c:596 logsrvd/logsrv_util.c:64 logsrvd/logsrvd.c:296
-#: logsrvd/logsrvd.c:305 logsrvd/logsrvd.c:1012 logsrvd/logsrvd.c:1075
-#: logsrvd/logsrvd_conf.c:1443 logsrvd/logsrvd_journal.c:70
-#: logsrvd/logsrvd_journal.c:203 logsrvd/logsrvd_journal.c:204
-#: logsrvd/logsrvd_journal.c:260 logsrvd/logsrvd_journal.c:420
-#: logsrvd/logsrvd_journal.c:422 logsrvd/logsrvd_local.c:174
-#: logsrvd/logsrvd_local.c:175 logsrvd/logsrvd_local.c:237
-#: logsrvd/logsrvd_local.c:238 logsrvd/logsrvd_local.c:376
-#: logsrvd/logsrvd_local.c:425 logsrvd/logsrvd_local.c:426
-#: logsrvd/logsrvd_local.c:431 logsrvd/logsrvd_local.c:432
-#: logsrvd/logsrvd_queue.c:154 logsrvd/logsrvd_queue.c:184
-#: logsrvd/logsrvd_queue.c:261 logsrvd/logsrvd_relay.c:439
-#: logsrvd/logsrvd_relay.c:738 logsrvd/logsrvd_relay.c:845
-#: logsrvd/sendlog.c:246 logsrvd/sendlog.c:255 logsrvd/sendlog.c:333
-#: logsrvd/sendlog.c:640 plugins/sudoers/audit.c:116
+#: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
+#: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
+#: logsrvd/iolog_writer.c:182 logsrvd/iolog_writer.c:215
+#: logsrvd/iolog_writer.c:225 logsrvd/iolog_writer.c:254
+#: logsrvd/iolog_writer.c:275 logsrvd/iolog_writer.c:287
+#: logsrvd/iolog_writer.c:297 logsrvd/iolog_writer.c:307
+#: logsrvd/iolog_writer.c:317 logsrvd/iolog_writer.c:329
+#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
+#: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
+#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301
+#: logsrvd/logsrvd.c:310 logsrvd/logsrvd.c:1050 logsrvd/logsrvd.c:1113
+#: logsrvd/logsrvd.c:1582 logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771
+#: logsrvd/logsrvd.c:1988 logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
+#: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
+#: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
+#: logsrvd/logsrvd_conf.c:626 logsrvd/logsrvd_conf.c:650
+#: logsrvd/logsrvd_conf.c:678 logsrvd/logsrvd_conf.c:692
+#: logsrvd/logsrvd_conf.c:706 logsrvd/logsrvd_conf.c:720
+#: logsrvd/logsrvd_conf.c:734 logsrvd/logsrvd_conf.c:748
+#: logsrvd/logsrvd_conf.c:829 logsrvd/logsrvd_conf.c:1036
+#: logsrvd/logsrvd_conf.c:1053 logsrvd/logsrvd_conf.c:1448
+#: logsrvd/logsrvd_conf.c:1595 logsrvd/logsrvd_conf.c:1621
+#: logsrvd/logsrvd_conf.c:1633 logsrvd/logsrvd_conf.c:1640
+#: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1743
+#: logsrvd/logsrvd_journal.c:75 logsrvd/logsrvd_journal.c:213
+#: logsrvd/logsrvd_journal.c:214 logsrvd/logsrvd_journal.c:270
+#: logsrvd/logsrvd_journal.c:430 logsrvd/logsrvd_journal.c:432
+#: logsrvd/logsrvd_local.c:215 logsrvd/logsrvd_local.c:216
+#: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:279
+#: logsrvd/logsrvd_local.c:417 logsrvd/logsrvd_local.c:466
+#: logsrvd/logsrvd_local.c:467 logsrvd/logsrvd_local.c:472
+#: logsrvd/logsrvd_local.c:473 logsrvd/logsrvd_queue.c:159
+#: logsrvd/logsrvd_queue.c:189 logsrvd/logsrvd_queue.c:266
+#: logsrvd/logsrvd_relay.c:444 logsrvd/logsrvd_relay.c:743
+#: logsrvd/logsrvd_relay.c:850 logsrvd/sendlog.c:251 logsrvd/sendlog.c:260
+#: logsrvd/sendlog.c:291 logsrvd/sendlog.c:338 logsrvd/sendlog.c:615
+#: logsrvd/sendlog.c:1801 plugins/sudoers/audit.c:116
 #: plugins/sudoers/auth/bsdauth.c:150 plugins/sudoers/auth/kerb5.c:121
 #: plugins/sudoers/auth/kerb5.c:148 plugins/sudoers/auth/pam.c:687
 #: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/auth/sia.c:59
@@ -109,11 +122,11 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1158
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
-#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:190
-#: plugins/sudoers/env.c:262 plugins/sudoers/exptilde.c:92
+#: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
+#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:188
+#: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
 #: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
-#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:133
+#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:228
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
 #: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
 #: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:464
@@ -122,124 +135,125 @@ msgstr ""
 #: plugins/sudoers/ldap.c:1798 plugins/sudoers/ldap.c:1879
 #: plugins/sudoers/ldap.c:2014 plugins/sudoers/ldap.c:2115
 #: plugins/sudoers/ldap.c:2131 plugins/sudoers/ldap_conf.c:218
-#: plugins/sudoers/ldap_conf.c:249 plugins/sudoers/ldap_conf.c:301
-#: plugins/sudoers/ldap_conf.c:337 plugins/sudoers/ldap_conf.c:443
-#: plugins/sudoers/ldap_conf.c:458 plugins/sudoers/ldap_conf.c:563
-#: plugins/sudoers/ldap_conf.c:596 plugins/sudoers/ldap_conf.c:688
-#: plugins/sudoers/ldap_conf.c:770 plugins/sudoers/ldap_util.c:294
+#: plugins/sudoers/ldap_conf.c:250 plugins/sudoers/ldap_conf.c:302
+#: plugins/sudoers/ldap_conf.c:338 plugins/sudoers/ldap_conf.c:444
+#: plugins/sudoers/ldap_conf.c:459 plugins/sudoers/ldap_conf.c:564
+#: plugins/sudoers/ldap_conf.c:597 plugins/sudoers/ldap_conf.c:689
+#: plugins/sudoers/ldap_conf.c:771 plugins/sudoers/ldap_util.c:294
 #: plugins/sudoers/ldap_util.c:301 plugins/sudoers/ldap_util.c:614
-#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:112
-#: plugins/sudoers/log_client.c:397 plugins/sudoers/log_client.c:710
-#: plugins/sudoers/log_client.c:731 plugins/sudoers/log_client.c:1451
-#: plugins/sudoers/log_client.c:1672 plugins/sudoers/log_client.c:2003
-#: plugins/sudoers/log_client.c:2059 plugins/sudoers/logging.c:112
-#: plugins/sudoers/logging.c:193 plugins/sudoers/logging.c:461
-#: plugins/sudoers/logging.c:675 plugins/sudoers/logging.c:812
-#: plugins/sudoers/match_command.c:333 plugins/sudoers/match_command.c:594
-#: plugins/sudoers/match_command.c:645 plugins/sudoers/match_command.c:719
-#: plugins/sudoers/match_command.c:767 plugins/sudoers/match_digest.c:93
-#: plugins/sudoers/parse.c:227 plugins/sudoers/parse.c:244
-#: plugins/sudoers/parse.c:263 plugins/sudoers/parse.c:282
-#: plugins/sudoers/parse.c:299 plugins/sudoers/parse.c:322
-#: plugins/sudoers/parse.c:333 plugins/sudoers/parse_ldif.c:153
-#: plugins/sudoers/parse_ldif.c:184 plugins/sudoers/parse_ldif.c:253
-#: plugins/sudoers/parse_ldif.c:261 plugins/sudoers/parse_ldif.c:266
-#: plugins/sudoers/parse_ldif.c:342 plugins/sudoers/parse_ldif.c:353
-#: plugins/sudoers/parse_ldif.c:380 plugins/sudoers/parse_ldif.c:397
-#: plugins/sudoers/parse_ldif.c:409 plugins/sudoers/parse_ldif.c:413
-#: plugins/sudoers/parse_ldif.c:427 plugins/sudoers/parse_ldif.c:484
-#: plugins/sudoers/parse_ldif.c:597 plugins/sudoers/parse_ldif.c:627
-#: plugins/sudoers/parse_ldif.c:652 plugins/sudoers/parse_ldif.c:710
-#: plugins/sudoers/parse_ldif.c:727 plugins/sudoers/parse_ldif.c:755
-#: plugins/sudoers/parse_ldif.c:762 plugins/sudoers/policy.c:606
-#: plugins/sudoers/policy.c:998 plugins/sudoers/prompt.c:93
-#: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
-#: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
-#: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
-#: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:913
-#: plugins/sudoers/pwutil.c:957 plugins/sudoers/pwutil.c:1014
-#: plugins/sudoers/sssd.c:145 plugins/sudoers/sssd.c:185
-#: plugins/sudoers/sssd.c:414 plugins/sudoers/sssd.c:479
-#: plugins/sudoers/sssd.c:505 plugins/sudoers/sssd.c:568
-#: plugins/sudoers/sssd.c:761 plugins/sudoers/strvec_join.c:53
-#: plugins/sudoers/stubs.c:111 plugins/sudoers/stubs.c:119
-#: plugins/sudoers/sudoers.c:349 plugins/sudoers/sudoers.c:375
-#: plugins/sudoers/sudoers.c:443 plugins/sudoers/sudoers.c:452
-#: plugins/sudoers/sudoers.c:493 plugins/sudoers/sudoers.c:858
-#: plugins/sudoers/sudoers.c:996 plugins/sudoers/sudoers.c:1055
-#: plugins/sudoers/sudoers.c:1320 plugins/sudoers/sudoreplay.c:562
+#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:117
+#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:715
+#: plugins/sudoers/log_client.c:736 plugins/sudoers/log_client.c:1416
+#: plugins/sudoers/log_client.c:1537 plugins/sudoers/log_client.c:1637
+#: plugins/sudoers/log_client.c:1973 plugins/sudoers/log_client.c:2032
+#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:189
+#: plugins/sudoers/logging.c:453 plugins/sudoers/logging.c:668
+#: plugins/sudoers/logging.c:805 plugins/sudoers/match_command.c:335
+#: plugins/sudoers/match_command.c:603 plugins/sudoers/match_command.c:654
+#: plugins/sudoers/match_command.c:728 plugins/sudoers/match_command.c:776
+#: plugins/sudoers/match_digest.c:93 plugins/sudoers/parse.c:227
+#: plugins/sudoers/parse.c:244 plugins/sudoers/parse.c:263
+#: plugins/sudoers/parse.c:282 plugins/sudoers/parse.c:299
+#: plugins/sudoers/parse.c:322 plugins/sudoers/parse.c:333
+#: plugins/sudoers/parse_ldif.c:153 plugins/sudoers/parse_ldif.c:184
+#: plugins/sudoers/parse_ldif.c:253 plugins/sudoers/parse_ldif.c:261
+#: plugins/sudoers/parse_ldif.c:266 plugins/sudoers/parse_ldif.c:342
+#: plugins/sudoers/parse_ldif.c:353 plugins/sudoers/parse_ldif.c:380
+#: plugins/sudoers/parse_ldif.c:397 plugins/sudoers/parse_ldif.c:409
+#: plugins/sudoers/parse_ldif.c:413 plugins/sudoers/parse_ldif.c:427
+#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
+#: plugins/sudoers/parse_ldif.c:628 plugins/sudoers/parse_ldif.c:653
+#: plugins/sudoers/parse_ldif.c:711 plugins/sudoers/parse_ldif.c:728
+#: plugins/sudoers/parse_ldif.c:756 plugins/sudoers/parse_ldif.c:763
+#: plugins/sudoers/policy.c:624 plugins/sudoers/policy.c:1026
+#: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
+#: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
+#: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
+#: plugins/sudoers/pwutil.c:659 plugins/sudoers/pwutil.c:857
+#: plugins/sudoers/pwutil.c:913 plugins/sudoers/pwutil.c:957
+#: plugins/sudoers/pwutil.c:1014 plugins/sudoers/sssd.c:145
+#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
+#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
+#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:761
+#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:112
+#: plugins/sudoers/stubs.c:120 plugins/sudoers/sudoers.c:354
+#: plugins/sudoers/sudoers.c:380 plugins/sudoers/sudoers.c:448
+#: plugins/sudoers/sudoers.c:457 plugins/sudoers/sudoers.c:498
+#: plugins/sudoers/sudoers.c:827 plugins/sudoers/sudoers.c:877
+#: plugins/sudoers/sudoers.c:1015 plugins/sudoers/sudoers.c:1075
+#: plugins/sudoers/sudoers.c:1330 plugins/sudoers/sudoreplay.c:562
 #: plugins/sudoers/sudoreplay.c:565 plugins/sudoers/sudoreplay.c:1281
 #: plugins/sudoers/sudoreplay.c:1503 plugins/sudoers/sudoreplay.c:1507
 #: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:224
-#: plugins/sudoers/testsudoers.c:241 plugins/sudoers/testsudoers.c:581
-#: plugins/sudoers/timestamp.c:424 plugins/sudoers/timestamp.c:468
-#: plugins/sudoers/timestamp.c:980 plugins/sudoers/timestamp.c:1118
+#: plugins/sudoers/testsudoers.c:241 plugins/sudoers/testsudoers.c:588
+#: plugins/sudoers/timestamp.c:451 plugins/sudoers/timestamp.c:495
+#: plugins/sudoers/timestamp.c:1017 plugins/sudoers/timestamp.c:1146
 #: plugins/sudoers/toke_util.c:78 plugins/sudoers/toke_util.c:106
 #: plugins/sudoers/toke_util.c:131 plugins/sudoers/toke_util.c:161
 #: plugins/sudoers/toke_util.c:200 plugins/sudoers/tsdump.c:123
-#: plugins/sudoers/visudo.c:148 plugins/sudoers/visudo.c:380
-#: plugins/sudoers/visudo.c:386 plugins/sudoers/visudo.c:492
-#: plugins/sudoers/visudo.c:1048 toke.l:1023 toke.l:1155 toke.l:1226
+#: plugins/sudoers/visudo.c:150 plugins/sudoers/visudo.c:385
+#: plugins/sudoers/visudo.c:391 plugins/sudoers/visudo.c:498
+#: plugins/sudoers/visudo.c:1054 toke.l:1023 toke.l:1155 toke.l:1226
 msgid "unable to allocate memory"
 msgstr ""
 
-#: gram.y:622
+#: gram.y:623
 msgid "a digest requires a path name"
 msgstr ""
 
-#: gram.y:644
+#: gram.y:645
 msgid "values for \"CWD\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:650
+#: gram.y:651
 msgid "\"CWD\" path too long"
 msgstr ""
 
-#: gram.y:660
+#: gram.y:661
 msgid "values for \"CHROOT\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: gram.y:666
+#: gram.y:667
 msgid "\"CHROOT\" path too long"
 msgstr ""
 
-#: gram.y:801
+#: gram.y:802
 #, c-format
 msgid "syntax error, reserved word %s used as an alias name"
 msgstr ""
 
-#: gram.y:824
+#: gram.y:825
 msgid "invalid notbefore value"
 msgstr ""
 
-#: gram.y:833
+#: gram.y:834
 msgid "invalid notafter value"
 msgstr ""
 
-#: gram.y:843 plugins/sudoers/policy.c:376
+#: gram.y:844 plugins/sudoers/policy.c:383
 msgid "timeout value too large"
 msgstr ""
 
-#: gram.y:845 plugins/sudoers/policy.c:378
+#: gram.y:846 plugins/sudoers/policy.c:385
 msgid "invalid timeout value"
 msgstr ""
 
-#: gram.y:966 plugins/sudoers/sudoers.c:1014
+#: gram.y:967 plugins/sudoers/sudoers.c:1033
 msgid "command too long"
 msgstr ""
 
-#: gram.y:1220 plugins/sudoers/check_aliases.c:96
-#: plugins/sudoers/defaults.c:1275
+#: gram.y:1224 plugins/sudoers/check_aliases.c:96
+#: plugins/sudoers/defaults.c:1276
 #, c-format
 msgid "%s:%d:%d: %s\n"
 msgstr ""
 
-#: gram.y:1270
+#: gram.y:1278
 #, c-format
 msgid "Alias \"%s\" already defined"
 msgstr ""
 
-#: gram.y:1769 gram.y:1816 lib/eventlog/eventlog.c:309
+#: gram.y:1777 gram.y:1827 lib/eventlog/eventlog.c:309
 #: lib/eventlog/eventlog.c:827 lib/eventlog/eventlog.c:900
 #: lib/eventlog/eventlog.c:903 lib/eventlog/eventlog.c:1204
 #: lib/iolog/iolog_filter.c:142 lib/iolog/iolog_filter.c:202
@@ -249,33 +263,48 @@ msgstr ""
 #: lib/iolog/iolog_legacy.c:111 lib/iolog/iolog_legacy.c:123
 #: lib/iolog/iolog_legacy.c:133 lib/iolog/iolog_legacy.c:139
 #: lib/iolog/iolog_loginfo.c:76 lib/iolog/iolog_loginfo.c:212
-#: logsrvd/iolog_writer.c:84 logsrvd/iolog_writer.c:89
-#: logsrvd/iolog_writer.c:123 logsrvd/iolog_writer.c:162
-#: logsrvd/iolog_writer.c:171 logsrvd/iolog_writer.c:189
-#: logsrvd/iolog_writer.c:211 logsrvd/iolog_writer.c:224
-#: logsrvd/iolog_writer.c:251 logsrvd/iolog_writer.c:260
-#: logsrvd/iolog_writer.c:276 logsrvd/iolog_writer.c:285
-#: logsrvd/iolog_writer.c:300 logsrvd/iolog_writer.c:313
-#: logsrvd/iolog_writer.c:326 logsrvd/iolog_writer.c:339
-#: logsrvd/iolog_writer.c:354 logsrvd/iolog_writer.c:393
-#: logsrvd/iolog_writer.c:399 logsrvd/iolog_writer.c:406
-#: logsrvd/iolog_writer.c:412 logsrvd/iolog_writer.c:596
-#: logsrvd/logsrv_util.c:64 logsrvd/logsrvd.c:296 logsrvd/logsrvd.c:305
-#: logsrvd/logsrvd.c:448 logsrvd/logsrvd.c:485 logsrvd/logsrvd.c:593
-#: logsrvd/logsrvd.c:1086 logsrvd/logsrvd.c:1403 logsrvd/logsrvd.c:1410
-#: logsrvd/logsrvd_conf.c:1443 logsrvd/logsrvd_journal.c:70
-#: logsrvd/logsrvd_journal.c:114 logsrvd/logsrvd_journal.c:203
-#: logsrvd/logsrvd_journal.c:233 logsrvd/logsrvd_journal.c:237
-#: logsrvd/logsrvd_journal.c:245 logsrvd/logsrvd_journal.c:268
-#: logsrvd/logsrvd_journal.c:272 logsrvd/logsrvd_journal.c:420
-#: logsrvd/logsrvd_local.c:174 logsrvd/logsrvd_local.c:237
-#: logsrvd/logsrvd_local.c:425 logsrvd/logsrvd_local.c:431
-#: logsrvd/logsrvd_local.c:450 logsrvd/logsrvd_queue.c:153
-#: logsrvd/logsrvd_queue.c:184 logsrvd/logsrvd_queue.c:261
-#: logsrvd/sendlog.c:246 logsrvd/sendlog.c:255 logsrvd/sendlog.c:333
-#: logsrvd/sendlog.c:640 logsrvd/sendlog.c:1526 logsrvd/sendlog.c:1533
-#: logsrvd/sendlog.c:1756 logsrvd/tls_init.c:299 logsrvd/tls_init.c:323
-#: logsrvd/tls_init.c:334 plugins/sudoers/audit.c:116
+#: logsrvd/iolog_writer.c:95 logsrvd/iolog_writer.c:100
+#: logsrvd/iolog_writer.c:134 logsrvd/iolog_writer.c:171
+#: logsrvd/iolog_writer.c:181 logsrvd/iolog_writer.c:194
+#: logsrvd/iolog_writer.c:214 logsrvd/iolog_writer.c:224
+#: logsrvd/iolog_writer.c:243 logsrvd/iolog_writer.c:253
+#: logsrvd/iolog_writer.c:264 logsrvd/iolog_writer.c:274
+#: logsrvd/iolog_writer.c:286 logsrvd/iolog_writer.c:296
+#: logsrvd/iolog_writer.c:306 logsrvd/iolog_writer.c:316
+#: logsrvd/iolog_writer.c:328 logsrvd/iolog_writer.c:364
+#: logsrvd/iolog_writer.c:370 logsrvd/iolog_writer.c:377
+#: logsrvd/iolog_writer.c:383 logsrvd/iolog_writer.c:567
+#: logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301 logsrvd/logsrvd.c:310
+#: logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:490 logsrvd/logsrvd.c:522
+#: logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:611 logsrvd/logsrvd.c:660
+#: logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:732 logsrvd/logsrvd.c:1124
+#: logsrvd/logsrvd.c:1439 logsrvd/logsrvd.c:1446 logsrvd/logsrvd.c:1582
+#: logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771 logsrvd/logsrvd.c:1988
+#: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
+#: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
+#: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
+#: logsrvd/logsrvd_conf.c:626 logsrvd/logsrvd_conf.c:649
+#: logsrvd/logsrvd_conf.c:678 logsrvd/logsrvd_conf.c:692
+#: logsrvd/logsrvd_conf.c:706 logsrvd/logsrvd_conf.c:720
+#: logsrvd/logsrvd_conf.c:734 logsrvd/logsrvd_conf.c:748
+#: logsrvd/logsrvd_conf.c:829 logsrvd/logsrvd_conf.c:1036
+#: logsrvd/logsrvd_conf.c:1053 logsrvd/logsrvd_conf.c:1448
+#: logsrvd/logsrvd_conf.c:1595 logsrvd/logsrvd_conf.c:1621
+#: logsrvd/logsrvd_conf.c:1633 logsrvd/logsrvd_conf.c:1640
+#: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1742
+#: logsrvd/logsrvd_journal.c:75 logsrvd/logsrvd_journal.c:122
+#: logsrvd/logsrvd_journal.c:213 logsrvd/logsrvd_journal.c:243
+#: logsrvd/logsrvd_journal.c:247 logsrvd/logsrvd_journal.c:255
+#: logsrvd/logsrvd_journal.c:278 logsrvd/logsrvd_journal.c:282
+#: logsrvd/logsrvd_journal.c:430 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:466
+#: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:491
+#: logsrvd/logsrvd_queue.c:158 logsrvd/logsrvd_queue.c:189
+#: logsrvd/logsrvd_queue.c:266 logsrvd/sendlog.c:251 logsrvd/sendlog.c:260
+#: logsrvd/sendlog.c:291 logsrvd/sendlog.c:338 logsrvd/sendlog.c:615
+#: logsrvd/sendlog.c:1503 logsrvd/sendlog.c:1510 logsrvd/sendlog.c:1733
+#: logsrvd/sendlog.c:1801 logsrvd/tls_init.c:305 logsrvd/tls_init.c:329
+#: logsrvd/tls_init.c:340 plugins/sudoers/audit.c:116
 #: plugins/sudoers/auth/pam.c:502 plugins/sudoers/auth/pam.c:687
 #: plugins/sudoers/auth/rfc1938.c:111 plugins/sudoers/check_aliases.c:168
 #: plugins/sudoers/cvtsudoers.c:131 plugins/sudoers/cvtsudoers.c:174
@@ -304,11 +333,11 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:633
 #: plugins/sudoers/cvtsudoers_merge.c:1157
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
-#: plugins/sudoers/defaults.c:657 plugins/sudoers/defaults.c:1018
-#: plugins/sudoers/defaults.c:1186 plugins/sudoers/editor.c:190
-#: plugins/sudoers/env.c:262 plugins/sudoers/exptilde.c:92
+#: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
+#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:188
+#: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
 #: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
-#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:132
+#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:227
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
 #: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
 #: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:464
@@ -317,46 +346,47 @@ msgstr ""
 #: plugins/sudoers/ldap.c:1798 plugins/sudoers/ldap.c:1879
 #: plugins/sudoers/ldap.c:2014 plugins/sudoers/ldap.c:2115
 #: plugins/sudoers/ldap.c:2131 plugins/sudoers/ldap_conf.c:218
-#: plugins/sudoers/ldap_conf.c:249 plugins/sudoers/ldap_conf.c:301
-#: plugins/sudoers/ldap_conf.c:337 plugins/sudoers/ldap_conf.c:443
-#: plugins/sudoers/ldap_conf.c:458 plugins/sudoers/ldap_conf.c:563
-#: plugins/sudoers/ldap_conf.c:596 plugins/sudoers/ldap_conf.c:687
-#: plugins/sudoers/ldap_conf.c:770 plugins/sudoers/ldap_util.c:293
+#: plugins/sudoers/ldap_conf.c:250 plugins/sudoers/ldap_conf.c:302
+#: plugins/sudoers/ldap_conf.c:338 plugins/sudoers/ldap_conf.c:444
+#: plugins/sudoers/ldap_conf.c:459 plugins/sudoers/ldap_conf.c:564
+#: plugins/sudoers/ldap_conf.c:597 plugins/sudoers/ldap_conf.c:688
+#: plugins/sudoers/ldap_conf.c:771 plugins/sudoers/ldap_util.c:293
 #: plugins/sudoers/ldap_util.c:300 plugins/sudoers/ldap_util.c:614
-#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:112
-#: plugins/sudoers/log_client.c:223 plugins/sudoers/log_client.c:245
-#: plugins/sudoers/log_client.c:259 plugins/sudoers/log_client.c:397
-#: plugins/sudoers/log_client.c:710 plugins/sudoers/log_client.c:731
-#: plugins/sudoers/log_client.c:1451 plugins/sudoers/log_client.c:1672
-#: plugins/sudoers/log_client.c:2003 plugins/sudoers/log_client.c:2059
-#: plugins/sudoers/logging.c:112 plugins/sudoers/logging.c:192
-#: plugins/sudoers/logging.c:193 plugins/sudoers/logging.c:461
-#: plugins/sudoers/logging.c:675 plugins/sudoers/logging.c:812
-#: plugins/sudoers/logging.c:882 plugins/sudoers/logging.c:894
-#: plugins/sudoers/match_command.c:332 plugins/sudoers/match_command.c:593
-#: plugins/sudoers/match_command.c:644 plugins/sudoers/match_command.c:719
-#: plugins/sudoers/match_command.c:766 plugins/sudoers/match_digest.c:93
-#: plugins/sudoers/parse.c:226 plugins/sudoers/parse.c:243
-#: plugins/sudoers/parse.c:262 plugins/sudoers/parse.c:281
-#: plugins/sudoers/parse.c:298 plugins/sudoers/parse.c:321
-#: plugins/sudoers/parse.c:332 plugins/sudoers/parse_ldif.c:152
-#: plugins/sudoers/parse_ldif.c:183 plugins/sudoers/parse_ldif.c:252
-#: plugins/sudoers/parse_ldif.c:260 plugins/sudoers/parse_ldif.c:265
-#: plugins/sudoers/parse_ldif.c:341 plugins/sudoers/parse_ldif.c:352
-#: plugins/sudoers/parse_ldif.c:379 plugins/sudoers/parse_ldif.c:396
-#: plugins/sudoers/parse_ldif.c:408 plugins/sudoers/parse_ldif.c:412
-#: plugins/sudoers/parse_ldif.c:426 plugins/sudoers/parse_ldif.c:484
-#: plugins/sudoers/parse_ldif.c:597 plugins/sudoers/parse_ldif.c:626
-#: plugins/sudoers/parse_ldif.c:651 plugins/sudoers/parse_ldif.c:709
-#: plugins/sudoers/parse_ldif.c:726 plugins/sudoers/parse_ldif.c:754
-#: plugins/sudoers/parse_ldif.c:761 plugins/sudoers/policy.c:152
-#: plugins/sudoers/policy.c:161 plugins/sudoers/policy.c:170
-#: plugins/sudoers/policy.c:198 plugins/sudoers/policy.c:361
-#: plugins/sudoers/policy.c:376 plugins/sudoers/policy.c:378
-#: plugins/sudoers/policy.c:414 plugins/sudoers/policy.c:423
-#: plugins/sudoers/policy.c:471 plugins/sudoers/policy.c:481
+#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:117
+#: plugins/sudoers/log_client.c:228 plugins/sudoers/log_client.c:250
+#: plugins/sudoers/log_client.c:264 plugins/sudoers/log_client.c:402
+#: plugins/sudoers/log_client.c:715 plugins/sudoers/log_client.c:736
+#: plugins/sudoers/log_client.c:1416 plugins/sudoers/log_client.c:1537
+#: plugins/sudoers/log_client.c:1637 plugins/sudoers/log_client.c:1973
+#: plugins/sudoers/log_client.c:2032 plugins/sudoers/logging.c:110
+#: plugins/sudoers/logging.c:188 plugins/sudoers/logging.c:189
+#: plugins/sudoers/logging.c:453 plugins/sudoers/logging.c:668
+#: plugins/sudoers/logging.c:805 plugins/sudoers/logging.c:876
+#: plugins/sudoers/logging.c:888 plugins/sudoers/match_command.c:334
+#: plugins/sudoers/match_command.c:602 plugins/sudoers/match_command.c:653
+#: plugins/sudoers/match_command.c:728 plugins/sudoers/match_command.c:775
+#: plugins/sudoers/match_digest.c:93 plugins/sudoers/parse.c:226
+#: plugins/sudoers/parse.c:243 plugins/sudoers/parse.c:262
+#: plugins/sudoers/parse.c:281 plugins/sudoers/parse.c:298
+#: plugins/sudoers/parse.c:321 plugins/sudoers/parse.c:332
+#: plugins/sudoers/parse_ldif.c:152 plugins/sudoers/parse_ldif.c:183
+#: plugins/sudoers/parse_ldif.c:252 plugins/sudoers/parse_ldif.c:260
+#: plugins/sudoers/parse_ldif.c:265 plugins/sudoers/parse_ldif.c:341
+#: plugins/sudoers/parse_ldif.c:352 plugins/sudoers/parse_ldif.c:379
+#: plugins/sudoers/parse_ldif.c:396 plugins/sudoers/parse_ldif.c:408
+#: plugins/sudoers/parse_ldif.c:412 plugins/sudoers/parse_ldif.c:426
+#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
+#: plugins/sudoers/parse_ldif.c:627 plugins/sudoers/parse_ldif.c:652
+#: plugins/sudoers/parse_ldif.c:710 plugins/sudoers/parse_ldif.c:727
+#: plugins/sudoers/parse_ldif.c:755 plugins/sudoers/parse_ldif.c:762
+#: plugins/sudoers/policy.c:153 plugins/sudoers/policy.c:162
+#: plugins/sudoers/policy.c:171 plugins/sudoers/policy.c:199
+#: plugins/sudoers/policy.c:368 plugins/sudoers/policy.c:383
+#: plugins/sudoers/policy.c:385 plugins/sudoers/policy.c:423
+#: plugins/sudoers/policy.c:432 plugins/sudoers/policy.c:480
 #: plugins/sudoers/policy.c:490 plugins/sudoers/policy.c:499
-#: plugins/sudoers/policy.c:606 plugins/sudoers/policy.c:998
+#: plugins/sudoers/policy.c:508 plugins/sudoers/policy.c:517
+#: plugins/sudoers/policy.c:624 plugins/sudoers/policy.c:1026
 #: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
 #: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
 #: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
@@ -369,25 +399,25 @@ msgstr ""
 #: plugins/sudoers/sssd.c:414 plugins/sudoers/sssd.c:479
 #: plugins/sudoers/sssd.c:505 plugins/sudoers/sssd.c:568
 #: plugins/sudoers/sssd.c:761 plugins/sudoers/strvec_join.c:53
-#: plugins/sudoers/stubs.c:111 plugins/sudoers/stubs.c:119
-#: plugins/sudoers/sudoers.c:349 plugins/sudoers/sudoers.c:375
-#: plugins/sudoers/sudoers.c:443 plugins/sudoers/sudoers.c:452
-#: plugins/sudoers/sudoers.c:493 plugins/sudoers/sudoers.c:858
-#: plugins/sudoers/sudoers.c:996 plugins/sudoers/sudoers.c:1055
-#: plugins/sudoers/sudoers.c:1320 plugins/sudoers/sudoreplay.c:562
-#: plugins/sudoers/sudoreplay.c:565 plugins/sudoers/sudoreplay.c:1281
-#: plugins/sudoers/sudoreplay.c:1503 plugins/sudoers/sudoreplay.c:1507
-#: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:224
-#: plugins/sudoers/testsudoers.c:241 plugins/sudoers/testsudoers.c:581
-#: plugins/sudoers/timestamp.c:424 plugins/sudoers/timestamp.c:468
-#: plugins/sudoers/timestamp.c:980 plugins/sudoers/timestamp.c:1118
-#: plugins/sudoers/toke_util.c:78 plugins/sudoers/toke_util.c:106
-#: plugins/sudoers/toke_util.c:131 plugins/sudoers/toke_util.c:160
-#: plugins/sudoers/toke_util.c:200 plugins/sudoers/tsdump.c:123
-#: plugins/sudoers/visudo.c:148 plugins/sudoers/visudo.c:380
-#: plugins/sudoers/visudo.c:386 plugins/sudoers/visudo.c:492
-#: plugins/sudoers/visudo.c:1048 toke.l:1023 toke.l:1155 toke.l:1218
-#: toke.l:1226
+#: plugins/sudoers/stubs.c:112 plugins/sudoers/stubs.c:120
+#: plugins/sudoers/sudoers.c:354 plugins/sudoers/sudoers.c:380
+#: plugins/sudoers/sudoers.c:448 plugins/sudoers/sudoers.c:457
+#: plugins/sudoers/sudoers.c:498 plugins/sudoers/sudoers.c:827
+#: plugins/sudoers/sudoers.c:877 plugins/sudoers/sudoers.c:1015
+#: plugins/sudoers/sudoers.c:1075 plugins/sudoers/sudoers.c:1330
+#: plugins/sudoers/sudoreplay.c:562 plugins/sudoers/sudoreplay.c:565
+#: plugins/sudoers/sudoreplay.c:1281 plugins/sudoers/sudoreplay.c:1503
+#: plugins/sudoers/sudoreplay.c:1507 plugins/sudoers/testsudoers.c:120
+#: plugins/sudoers/testsudoers.c:224 plugins/sudoers/testsudoers.c:241
+#: plugins/sudoers/testsudoers.c:588 plugins/sudoers/timestamp.c:451
+#: plugins/sudoers/timestamp.c:495 plugins/sudoers/timestamp.c:1017
+#: plugins/sudoers/timestamp.c:1146 plugins/sudoers/toke_util.c:78
+#: plugins/sudoers/toke_util.c:106 plugins/sudoers/toke_util.c:131
+#: plugins/sudoers/toke_util.c:160 plugins/sudoers/toke_util.c:200
+#: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:150
+#: plugins/sudoers/visudo.c:385 plugins/sudoers/visudo.c:391
+#: plugins/sudoers/visudo.c:498 plugins/sudoers/visudo.c:1054 toke.l:1023
+#: toke.l:1155 toke.l:1218 toke.l:1226
 #, c-format
 msgid "%s: %s"
 msgstr ""
@@ -396,14 +426,14 @@ msgstr ""
 #: lib/iolog/iolog_json.c:568 lib/iolog/iolog_json.c:574
 #: plugins/sudoers/cvtsudoers_csv.c:192 plugins/sudoers/cvtsudoers_csv.c:199
 #: plugins/sudoers/cvtsudoers_ldif.c:244 plugins/sudoers/cvtsudoers_ldif.c:251
-#: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:326
-#: plugins/sudoers/env.c:333 plugins/sudoers/env.c:444
+#: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:340
+#: plugins/sudoers/env.c:347 plugins/sudoers/env.c:458
 #: plugins/sudoers/ldap.c:526 plugins/sudoers/ldap.c:759
 #: plugins/sudoers/ldap.c:1132 plugins/sudoers/ldap_conf.c:222
-#: plugins/sudoers/ldap_conf.c:312 plugins/sudoers/ldap_util.c:486
-#: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:465
-#: plugins/sudoers/logging.c:820 plugins/sudoers/logging.c:830
-#: plugins/sudoers/policy.c:776 plugins/sudoers/policy.c:787
+#: plugins/sudoers/ldap_conf.c:313 plugins/sudoers/ldap_util.c:486
+#: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:457
+#: plugins/sudoers/logging.c:813 plugins/sudoers/logging.c:823
+#: plugins/sudoers/policy.c:800 plugins/sudoers/policy.c:811
 #: plugins/sudoers/prompt.c:168 plugins/sudoers/serialize_list.c:62
 #: plugins/sudoers/serialize_list.c:71 plugins/sudoers/strvec_join.c:62
 #: plugins/sudoers/testsudoers.c:245 plugins/sudoers/toke_util.c:213 toke.l:987
@@ -446,7 +476,7 @@ msgstr ""
 msgid "%8s : (command continued) %s"
 msgstr ""
 
-#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1241
+#: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1242
 #: plugins/sudoers/sudoreplay.c:1293 plugins/sudoers/sudoreplay.c:1558
 #, c-format
 msgid "invalid regular expression \"%s\": %s"
@@ -561,14 +591,14 @@ msgstr ""
 msgid "%s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/iolog/iolog_mkdirs.c:119 lib/iolog/iolog_mkdtemp.c:77
-#: logsrvd/iolog_writer.c:810 plugins/sudoers/timestamp.c:205
+#: lib/iolog/iolog_mkdirs.c:123 lib/iolog/iolog_mkdtemp.c:78
+#: logsrvd/iolog_writer.c:781 plugins/sudoers/timestamp.c:209
 #, c-format
 msgid "unable to mkdir %s"
 msgstr ""
 
-#: lib/iolog/iolog_mkdtemp.c:81 plugins/sudoers/visudo.c:747
-#: plugins/sudoers/visudo.c:781 plugins/sudoers/visudo.c:787
+#: lib/iolog/iolog_mkdtemp.c:83 plugins/sudoers/visudo.c:753
+#: plugins/sudoers/visudo.c:787 plugins/sudoers/visudo.c:793
 #, c-format
 msgid "unable to change mode of %s to 0%o"
 msgstr ""
@@ -583,150 +613,156 @@ msgstr ""
 msgid "invalid timing file line: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:130 plugins/sudoers/logging.c:982
-#: plugins/sudoers/policy.c:573
-msgid "unable to generate UUID"
+#: logsrvd/iolog_writer.c:65
+#, c-format
+msgid "%s: protocol error: NULL key"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:158 logsrvd/iolog_writer.c:176
-#: logsrvd/iolog_writer.c:185 logsrvd/iolog_writer.c:203
-#: logsrvd/iolog_writer.c:216 logsrvd/iolog_writer.c:229
-#: logsrvd/iolog_writer.c:240 logsrvd/iolog_writer.c:247
-#: logsrvd/iolog_writer.c:265 logsrvd/iolog_writer.c:272
-#: logsrvd/iolog_writer.c:290 logsrvd/iolog_writer.c:305
-#: logsrvd/iolog_writer.c:318 logsrvd/iolog_writer.c:331
-#: logsrvd/iolog_writer.c:344 logsrvd/iolog_writer.c:359
+#: logsrvd/iolog_writer.c:69
 #, c-format
 msgid "%s: protocol error: wrong type for %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:370 logsrvd/iolog_writer.c:375
-#: logsrvd/iolog_writer.c:380 logsrvd/iolog_writer.c:385
+#: logsrvd/iolog_writer.c:74 logsrvd/logsrvd_local.c:109
+#: logsrvd/logsrvd_local.c:123 logsrvd/logsrvd_local.c:131
+#: logsrvd/logsrvd_local.c:149
+#, c-format
+msgid "%s: protocol error: NULL value found in %s"
+msgstr ""
+
+#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:976
+#: plugins/sudoers/policy.c:591
+msgid "unable to generate UUID"
+msgstr ""
+
+#: logsrvd/iolog_writer.c:341 logsrvd/iolog_writer.c:346
+#: logsrvd/iolog_writer.c:351 logsrvd/iolog_writer.c:356
 #, c-format
 msgid "%s: protocol error: %s missing from AcceptMessage"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:446
+#: logsrvd/iolog_writer.c:417
 #, c-format
 msgid "%s: unable to format session id"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:460 logsrvd/iolog_writer.c:474
-#: logsrvd/iolog_writer.c:488 logsrvd/iolog_writer.c:503
-#: logsrvd/iolog_writer.c:517 logsrvd/iolog_writer.c:531
+#: logsrvd/iolog_writer.c:431 logsrvd/iolog_writer.c:445
+#: logsrvd/iolog_writer.c:459 logsrvd/iolog_writer.c:474
+#: logsrvd/iolog_writer.c:488 logsrvd/iolog_writer.c:502
 #, c-format
 msgid "%s: %s is not set"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:567 logsrvd/iolog_writer.c:574
+#: logsrvd/iolog_writer.c:538 logsrvd/iolog_writer.c:545
 #, c-format
 msgid "unable to expand iolog path %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:592
+#: logsrvd/iolog_writer.c:563
 #, c-format
 msgid "unable to create iolog path %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:622
+#: logsrvd/iolog_writer.c:593
 #, c-format
 msgid "invalid iofd %d"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:642
+#: logsrvd/iolog_writer.c:613
 #, c-format
 msgid "error closing iofd %d: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:662
+#: logsrvd/iolog_writer.c:633
 #, c-format
 msgid "error flushing iofd %d: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:780
+#: logsrvd/iolog_writer.c:751
 #, c-format
 msgid "invalid I/O log %s: %s referenced but not present"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:792 logsrvd/logsrvd_journal.c:372
+#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:382
 #, c-format
 msgid "%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:814 logsrvd/logsrvd_journal.c:415
-#: logsrvd/logsrvd_queue.c:110 logsrvd/tls_init.c:250
-#: plugins/sudoers/check.c:282 plugins/sudoers/cvtsudoers.c:730
+#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:425
+#: logsrvd/logsrvd_queue.c:115 logsrvd/tls_init.c:256
+#: plugins/sudoers/check.c:292 plugins/sudoers/cvtsudoers.c:730
 #: plugins/sudoers/cvtsudoers.c:751 plugins/sudoers/cvtsudoers.c:1431
-#: plugins/sudoers/cvtsudoers_csv.c:692 plugins/sudoers/cvtsudoers_json.c:898
-#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1106
-#: plugins/sudoers/sudoreplay.c:1469 plugins/sudoers/timestamp.c:433
-#: plugins/sudoers/tsdump.c:128 plugins/sudoers/visudo.c:965
+#: plugins/sudoers/cvtsudoers_csv.c:695 plugins/sudoers/cvtsudoers_json.c:898
+#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1113
+#: plugins/sudoers/sudoers.c:1143 plugins/sudoers/sudoreplay.c:1469
+#: plugins/sudoers/timestamp.c:460 plugins/sudoers/tsdump.c:128
+#: plugins/sudoers/visudo.c:971
 #, c-format
 msgid "unable to open %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:826 logsrvd/logsrv_util.c:100
-#: logsrvd/logsrv_util.c:107 plugins/sudoers/sudoreplay.c:362
+#: logsrvd/iolog_writer.c:797 logsrvd/logsrv_util.c:105
+#: logsrvd/logsrv_util.c:112 plugins/sudoers/sudoreplay.c:362
 #: plugins/sudoers/sudoreplay.c:368
 #, c-format
 msgid "unable to open %s/%s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:839
+#: logsrvd/iolog_writer.c:810
 #, c-format
 msgid "unable to copy %s/%s to %s/%s: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:868 logsrvd/logsrvd_journal.c:185
+#: logsrvd/iolog_writer.c:839 logsrvd/logsrvd_journal.c:195
 #, c-format
 msgid "unable to rename %s to %s"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:142 logsrvd/logsrv_util.c:171
+#: logsrvd/logsrv_util.c:147 logsrvd/logsrv_util.c:176
 #, c-format
 msgid "%s/%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:154
+#: logsrvd/logsrv_util.c:159
 #, c-format
 msgid "missing I/O log file %s/%s"
 msgstr ""
 
-#: logsrvd/logsrv_util.c:161
+#: logsrvd/logsrv_util.c:166
 #, c-format
 msgid "%s/%s: unable to seek forward %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:266 logsrvd/logsrvd_queue.c:130
+#: logsrvd/logsrvd.c:271 logsrvd/logsrvd_queue.c:135
 msgid "unable to connect to relay"
 msgstr ""
 
-#: logsrvd/logsrvd.c:325 logsrvd/logsrvd_relay.c:837
+#: logsrvd/logsrvd.c:330 logsrvd/logsrvd_relay.c:842
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:417 logsrvd/logsrvd.c:534 logsrvd/logsrvd.c:613
-#: logsrvd/logsrvd.c:837 logsrvd/logsrvd.c:851 logsrvd/logsrvd.c:1011
-#: logsrvd/logsrvd.c:1136 logsrvd/logsrvd.c:1309 logsrvd/logsrvd.c:1327
-#: logsrvd/logsrvd.c:1428 logsrvd/logsrvd.c:1551 logsrvd/logsrvd.c:1735
-#: logsrvd/logsrvd_journal.c:484 logsrvd/logsrvd_local.c:197
-#: logsrvd/logsrvd_queue.c:159 logsrvd/logsrvd_relay.c:167
-#: logsrvd/logsrvd_relay.c:244 logsrvd/logsrvd_relay.c:248
-#: logsrvd/logsrvd_relay.c:384 logsrvd/logsrvd_relay.c:576
-#: logsrvd/logsrvd_relay.c:737 logsrvd/logsrvd_relay.c:1124
-#: logsrvd/sendlog.c:1316 logsrvd/tls_client.c:131 logsrvd/tls_client.c:147
-#: logsrvd/tls_client.c:211 plugins/sudoers/audit.c:276
-#: plugins/sudoers/iolog.c:1031 plugins/sudoers/iolog.c:1164
-#: plugins/sudoers/iolog.c:1262 plugins/sudoers/log_client.c:116
-#: plugins/sudoers/log_client.c:338 plugins/sudoers/log_client.c:354
-#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:606
-#: plugins/sudoers/log_client.c:613 plugins/sudoers/log_client.c:1138
-#: plugins/sudoers/log_client.c:1420 plugins/sudoers/log_client.c:1461
-#: plugins/sudoers/log_client.c:1469 plugins/sudoers/log_client.c:1628
-#: plugins/sudoers/log_client.c:1746 plugins/sudoers/log_client.c:2067
-#: plugins/sudoers/log_client.c:2075 plugins/sudoers/logging.c:150
-#: plugins/sudoers/logging.c:209 plugins/sudoers/sudoreplay.c:522
+#: logsrvd/logsrvd.c:422 logsrvd/logsrvd.c:545 logsrvd/logsrvd.c:631
+#: logsrvd/logsrvd.c:873 logsrvd/logsrvd.c:887 logsrvd/logsrvd.c:1049
+#: logsrvd/logsrvd.c:1174 logsrvd/logsrvd.c:1347 logsrvd/logsrvd.c:1365
+#: logsrvd/logsrvd.c:1464 logsrvd/logsrvd.c:1589 logsrvd/logsrvd.c:1773
+#: logsrvd/logsrvd_journal.c:494 logsrvd/logsrvd_local.c:238
+#: logsrvd/logsrvd_queue.c:164 logsrvd/logsrvd_relay.c:172
+#: logsrvd/logsrvd_relay.c:249 logsrvd/logsrvd_relay.c:253
+#: logsrvd/logsrvd_relay.c:389 logsrvd/logsrvd_relay.c:581
+#: logsrvd/logsrvd_relay.c:742 logsrvd/logsrvd_relay.c:1131
+#: logsrvd/sendlog.c:1291 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
+#: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:278
+#: plugins/sudoers/iolog.c:1033 plugins/sudoers/iolog.c:1166
+#: plugins/sudoers/iolog.c:1264 plugins/sudoers/log_client.c:121
+#: plugins/sudoers/log_client.c:343 plugins/sudoers/log_client.c:359
+#: plugins/sudoers/log_client.c:407 plugins/sudoers/log_client.c:611
+#: plugins/sudoers/log_client.c:618 plugins/sudoers/log_client.c:1103
+#: plugins/sudoers/log_client.c:1385 plugins/sudoers/log_client.c:1426
+#: plugins/sudoers/log_client.c:1434 plugins/sudoers/log_client.c:1593
+#: plugins/sudoers/log_client.c:1711 plugins/sudoers/log_client.c:2040
+#: plugins/sudoers/log_client.c:2048 plugins/sudoers/logging.c:147
+#: plugins/sudoers/logging.c:205 plugins/sudoers/sudoreplay.c:522
 #: plugins/sudoers/sudoreplay.c:569 plugins/sudoers/sudoreplay.c:811
 #: plugins/sudoers/sudoreplay.c:923 plugins/sudoers/sudoreplay.c:1014
 #: plugins/sudoers/sudoreplay.c:1029 plugins/sudoers/sudoreplay.c:1036
@@ -735,633 +771,658 @@ msgstr ""
 msgid "unable to add event to queue"
 msgstr ""
 
-#: logsrvd/logsrvd.c:441 logsrvd/logsrvd.c:478 logsrvd/logsrvd.c:510
-#: logsrvd/logsrvd.c:558 logsrvd/logsrvd.c:630 logsrvd/logsrvd.c:660
-#: logsrvd/logsrvd.c:690 logsrvd/logsrvd.c:720 logsrvd/logsrvd_relay.c:505
-#: logsrvd/logsrvd_relay.c:538
+#: logsrvd/logsrvd.c:446 logsrvd/logsrvd.c:483 logsrvd/logsrvd.c:515
+#: logsrvd/logsrvd.c:569 logsrvd/logsrvd.c:648 logsrvd/logsrvd.c:684
+#: logsrvd/logsrvd.c:720 logsrvd/logsrvd.c:756 logsrvd/logsrvd_relay.c:510
+#: logsrvd/logsrvd_relay.c:543
 #, c-format
 msgid "unexpected state %d for %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:442 logsrvd/logsrvd.c:479 logsrvd/logsrvd.c:511
-#: logsrvd/logsrvd.c:559 logsrvd/logsrvd.c:631 logsrvd/logsrvd.c:661
-#: logsrvd/logsrvd.c:691 logsrvd/logsrvd.c:721 logsrvd/logsrvd_relay.c:507
-#: logsrvd/logsrvd_relay.c:540
+#: logsrvd/logsrvd.c:447 logsrvd/logsrvd.c:484 logsrvd/logsrvd.c:516
+#: logsrvd/logsrvd.c:570 logsrvd/logsrvd.c:649 logsrvd/logsrvd.c:685
+#: logsrvd/logsrvd.c:721 logsrvd/logsrvd.c:757 logsrvd/logsrvd_relay.c:512
+#: logsrvd/logsrvd_relay.c:545
 msgid "state machine error"
 msgstr ""
 
-#: logsrvd/logsrvd.c:448 logsrvd/logsrvd.c:449
+#: logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:454
 msgid "invalid AcceptMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:485 logsrvd/logsrvd.c:486
+#: logsrvd/logsrvd.c:490 logsrvd/logsrvd.c:491
 msgid "invalid RejectMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:593 logsrvd/logsrvd.c:594
+#: logsrvd/logsrvd.c:522 logsrvd/logsrvd.c:523
+msgid "invalid ExitMessage"
+msgstr ""
+
+#: logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:577
+msgid "invalid RestartMessage"
+msgstr ""
+
+#: logsrvd/logsrvd.c:611 logsrvd/logsrvd.c:612
 msgid "invalid AlertMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:635 logsrvd/logsrvd.c:665 logsrvd/logsrvd.c:695
+#: logsrvd/logsrvd.c:653 logsrvd/logsrvd.c:689 logsrvd/logsrvd.c:725
 #, c-format
 msgid "%s: unexpected IoBuffer"
 msgstr ""
 
-#: logsrvd/logsrvd.c:636 logsrvd/logsrvd.c:666 logsrvd/logsrvd.c:696
+#: logsrvd/logsrvd.c:654 logsrvd/logsrvd.c:690 logsrvd/logsrvd.c:726
 msgid "protocol error"
 msgstr ""
 
-#: logsrvd/logsrvd.c:746 logsrvd/logsrvd_journal.c:283
-#: logsrvd/logsrvd_relay.c:647 logsrvd/sendlog.c:1217
-#: plugins/sudoers/log_client.c:1618
+#: logsrvd/logsrvd.c:660 logsrvd/logsrvd.c:661
+msgid "invalid IoBuffer"
+msgstr ""
+
+#: logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:697
+msgid "invalid ChangeWindowSize"
+msgstr ""
+
+#: logsrvd/logsrvd.c:732 logsrvd/logsrvd.c:733
+msgid "invalid CommandSuspend"
+msgstr ""
+
+#: logsrvd/logsrvd.c:782 logsrvd/logsrvd_journal.c:293
+#: logsrvd/logsrvd_relay.c:652 logsrvd/sendlog.c:1192
+#: plugins/sudoers/log_client.c:1583
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:791 logsrvd/logsrvd_journal.c:357
-#: logsrvd/logsrvd_local.c:125 logsrvd/logsrvd_relay.c:671
+#: logsrvd/logsrvd.c:827 logsrvd/logsrvd_journal.c:367
+#: logsrvd/logsrvd_relay.c:676
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:793
+#: logsrvd/logsrvd.c:829
 msgid "unrecognized ClientMessage type"
 msgstr ""
 
-#: logsrvd/logsrvd.c:883
+#: logsrvd/logsrvd.c:919
 #, c-format
 msgid "timed out writing to client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:888 logsrvd/logsrvd_relay.c:909 logsrvd/sendlog.c:1420
+#: logsrvd/logsrvd.c:924 logsrvd/logsrvd_relay.c:914 logsrvd/sendlog.c:1395
 #, c-format
 msgid "missing write buffer for client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:982
+#: logsrvd/logsrvd.c:1020
 #, c-format
 msgid "timed out reading from client %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1023 logsrvd/logsrvd_relay.c:772
+#: logsrvd/logsrvd.c:1061 logsrvd/logsrvd_relay.c:777
 #, c-format
 msgid "EOF from %s without proper TLS shutdown"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1067 logsrvd/logsrvd_relay.c:200 logsrvd/sendlog.c:317
-#: plugins/sudoers/log_client.c:716
+#: logsrvd/logsrvd.c:1105 logsrvd/logsrvd_relay.c:205 logsrvd/sendlog.c:322
+#: plugins/sudoers/log_client.c:721
 #, c-format
 msgid "client message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1068 logsrvd/logsrvd_journal.c:246
-#: logsrvd/logsrvd_journal.c:247
+#: logsrvd/logsrvd.c:1106 logsrvd/logsrvd_journal.c:256
+#: logsrvd/logsrvd_journal.c:257
 msgid "client message too large"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1086 logsrvd/logsrvd.c:1087
+#: logsrvd/logsrvd.c:1124 logsrvd/logsrvd.c:1125
 msgid "invalid ClientMessage"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1389
+#: logsrvd/logsrvd.c:1425
 msgid "unable to get remote IP addr"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1420 logsrvd/tls_client.c:198
-#: plugins/sudoers/log_client.c:276
+#: logsrvd/logsrvd.c:1456 logsrvd/tls_client.c:203
+#: plugins/sudoers/log_client.c:281
 #, c-format
 msgid "Unable to attach user data to the ssl object: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1601 logsrvd/logsrvd.c:1953
+#: logsrvd/logsrvd.c:1639 logsrvd/logsrvd.c:1992
 msgid "unable to setup listen socket"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1718
+#: logsrvd/logsrvd.c:1756
 #, c-format
 msgid "unexpected signal %d"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1855
+#: logsrvd/logsrvd.c:1894
 msgid "sudo log server"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1857 logsrvd/sendlog.c:116
+#: logsrvd/logsrvd.c:1896 logsrvd/sendlog.c:121
 msgid "Options:"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1859
+#: logsrvd/logsrvd.c:1898
 msgid "path to configuration file"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1861 logsrvd/sendlog.c:118
+#: logsrvd/logsrvd.c:1900 logsrvd/sendlog.c:123
 msgid "display help message and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1863
+#: logsrvd/logsrvd.c:1902
 msgid "do not fork, run in the foreground"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1865
+#: logsrvd/logsrvd.c:1904
 msgid "percent chance connections will drop"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1867 logsrvd/sendlog.c:148
+#: logsrvd/logsrvd.c:1906 logsrvd/sendlog.c:153
 msgid "display version information and exit"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1917 logsrvd/sendlog.c:1725
+#: logsrvd/logsrvd.c:1956 logsrvd/sendlog.c:1702
 msgid "Protobuf-C version 1.3 or higher required"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1933
+#: logsrvd/logsrvd.c:1972
 #, c-format
 msgid "invalid random drop value: %s"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1936 logsrvd/sendlog.c:1779
+#: logsrvd/logsrvd.c:1975 logsrvd/sendlog.c:1756
 #: plugins/sudoers/cvtsudoers.c:246 plugins/sudoers/sudoreplay.c:301
-#: plugins/sudoers/visudo.c:180
+#: plugins/sudoers/visudo.c:182
 #, c-format
 msgid "%s version %s\n"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:417 plugins/sudoers/check.c:347
+#: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:353
 #: plugins/sudoers/exptilde.c:85 plugins/sudoers/iolog.c:122
-#: plugins/sudoers/policy.c:1234 plugins/sudoers/sudoers.c:500
-#: plugins/sudoers/sudoers.c:1362 plugins/sudoers/testsudoers.c:215
+#: plugins/sudoers/policy.c:1264 plugins/sudoers/sudoers.c:505
+#: plugins/sudoers/sudoers.c:1372 plugins/sudoers/testsudoers.c:215
 #: plugins/sudoers/testsudoers.c:382
 #, c-format
 msgid "unknown user %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:434 plugins/sudoers/iolog.c:148
-#: plugins/sudoers/sudoers.c:505 plugins/sudoers/sudoers.c:1396
+#: logsrvd/logsrvd_conf.c:439 plugins/sudoers/iolog.c:148
+#: plugins/sudoers/sudoers.c:510 plugins/sudoers/sudoers.c:1406
 #: plugins/sudoers/testsudoers.c:406
 #, c-format
 msgid "unknown group %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:452
+#: logsrvd/logsrvd_conf.c:457
 #, c-format
 msgid "unable to parse iolog mode %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:469 logsrvd/logsrvd_conf.c:1238
+#: logsrvd/logsrvd_conf.c:474 logsrvd/logsrvd_conf.c:1243
 #, c-format
 msgid "invalid value for %s: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:522
+#: logsrvd/logsrvd_conf.c:527
 msgid "TLS not supported"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:544
+#: logsrvd/logsrvd_conf.c:549
 #, c-format
 msgid "%s:%s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:617 logsrvd/logsrvd_conf.c:1027
+#: logsrvd/logsrvd_conf.c:622 logsrvd/logsrvd_conf.c:1032
 #, c-format
 msgid "%s: not a fully qualified path"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:945 logsrvd/logsrvd_conf.c:961
-#: logsrvd/logsrvd_conf.c:1671
+#: logsrvd/logsrvd_conf.c:951 logsrvd/logsrvd_conf.c:967
+#: logsrvd/logsrvd_conf.c:1676
 #, c-format
 msgid "unknown syslog facility %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:977 logsrvd/logsrvd_conf.c:993
-#: logsrvd/logsrvd_conf.c:1009 logsrvd/logsrvd_conf.c:1675
-#: logsrvd/logsrvd_conf.c:1679 logsrvd/logsrvd_conf.c:1683
+#: logsrvd/logsrvd_conf.c:983 logsrvd/logsrvd_conf.c:999
+#: logsrvd/logsrvd_conf.c:1015 logsrvd/logsrvd_conf.c:1680
+#: logsrvd/logsrvd_conf.c:1684 logsrvd/logsrvd_conf.c:1688
 #, c-format
 msgid "unknown syslog priority %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1192
+#: logsrvd/logsrvd_conf.c:1197
 #, c-format
 msgid "%s:%d unmatched '[': %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1198
+#: logsrvd/logsrvd_conf.c:1203
 #, c-format
 msgid "%s:%d garbage after ']': %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1210
+#: logsrvd/logsrvd_conf.c:1215
 #, c-format
 msgid "%s:%d invalid config section: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1218
+#: logsrvd/logsrvd_conf.c:1223
 #, c-format
 msgid "%s:%d invalid configuration line: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1224
+#: logsrvd/logsrvd_conf.c:1229
 #, c-format
 msgid "%s:%d expected section name: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1246
+#: logsrvd/logsrvd_conf.c:1251
 #, c-format
 msgid "%s:%d [%s] illegal key: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1276 plugins/sudoers/cvtsudoers.c:268
-#: plugins/sudoers/logging.c:1035
+#: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:268
+#: plugins/sudoers/logging.c:1029
 #, c-format
 msgid "unable to open log file %s"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1757
+#: logsrvd/logsrvd_conf.c:1763
 msgid "unable to initialize server TLS context"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:1777
+#: logsrvd/logsrvd_conf.c:1783
 msgid "unable to initialize relay TLS context"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:136 logsrvd/logsrvd_journal.c:411
-#: logsrvd/logsrvd_journal.c:416
+#: logsrvd/logsrvd_journal.c:146 logsrvd/logsrvd_journal.c:421
+#: logsrvd/logsrvd_journal.c:426
 msgid "unable to create journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:140 logsrvd/logsrvd_queue.c:104
-#: plugins/sudoers/visudo.c:1020
+#: logsrvd/logsrvd_journal.c:150 logsrvd/logsrvd_queue.c:109
+#: plugins/sudoers/visudo.c:1026
 #, c-format
 msgid "unable to lock %s"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:143
+#: logsrvd/logsrvd_journal.c:153
 msgid "unable to lock journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:151
+#: logsrvd/logsrvd_journal.c:161
 msgid "unable to open journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:172 logsrvd/logsrvd_journal.c:447
-#: logsrvd/logsrvd_journal.c:452
+#: logsrvd/logsrvd_journal.c:182 logsrvd/logsrvd_journal.c:457
+#: logsrvd/logsrvd_journal.c:462
 msgid "unable to write journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:180 logsrvd/logsrvd_journal.c:187
+#: logsrvd/logsrvd_journal.c:190 logsrvd/logsrvd_journal.c:197
 msgid "unable to rename journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:234 logsrvd/logsrvd_journal.c:235
-#: logsrvd/logsrvd_journal.c:269 logsrvd/logsrvd_journal.c:270
+#: logsrvd/logsrvd_journal.c:244 logsrvd/logsrvd_journal.c:245
+#: logsrvd/logsrvd_journal.c:279 logsrvd/logsrvd_journal.c:280
 msgid "unexpected EOF reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:238 logsrvd/logsrvd_journal.c:239
-#: logsrvd/logsrvd_journal.c:273 logsrvd/logsrvd_journal.c:274
+#: logsrvd/logsrvd_journal.c:248 logsrvd/logsrvd_journal.c:249
+#: logsrvd/logsrvd_journal.c:283 logsrvd/logsrvd_journal.c:284
 msgid "error reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:285 logsrvd/logsrvd_journal.c:371
+#: logsrvd/logsrvd_journal.c:295 logsrvd/logsrvd_journal.c:381
 msgid "invalid journal file, unable to restart"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:430
+#: logsrvd/logsrvd_journal.c:440
 #, c-format
 msgid "unable to seek to [%lld, %ld] in journal file %s"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:153
+#: logsrvd/logsrvd_local.c:166
+#, c-format
+msgid "unexpected value_case %d in %s from %s"
+msgstr ""
+
+#: logsrvd/logsrvd_local.c:194
 msgid "error parsing AcceptMessage"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:164
+#: logsrvd/logsrvd_local.c:205
 msgid "error creating I/O log"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:187
+#: logsrvd/logsrvd_local.c:228
 msgid "error logging accept event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:226
+#: logsrvd/logsrvd_local.c:267
 msgid "error parsing RejectMessage"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:250
+#: logsrvd/logsrvd_local.c:291
 msgid "error logging reject event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:386 logsrvd/logsrvd_local.c:394
+#: logsrvd/logsrvd_local.c:427 logsrvd/logsrvd_local.c:435
 msgid "error logging exit event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:451 logsrvd/logsrvd_local.c:452
+#: logsrvd/logsrvd_local.c:492 logsrvd/logsrvd_local.c:493
 msgid "log is already complete, cannot be restarted"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:482
+#: logsrvd/logsrvd_local.c:523
 msgid "unable to restart log"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:498
+#: logsrvd/logsrvd_local.c:539
 msgid "error parsing AlertMessage"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:508
+#: logsrvd/logsrvd_local.c:549
 msgid "error logging alert event"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:544 logsrvd/logsrvd_local.c:607
-#: logsrvd/logsrvd_local.c:642
+#: logsrvd/logsrvd_local.c:585 logsrvd/logsrvd_local.c:648
+#: logsrvd/logsrvd_local.c:683
 #, c-format
 msgid "unable to format timing buffer, length %d"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:558 logsrvd/logsrvd_local.c:566
-#: logsrvd/logsrvd_local.c:614 logsrvd/logsrvd_local.c:649
+#: logsrvd/logsrvd_local.c:599 logsrvd/logsrvd_local.c:607
+#: logsrvd/logsrvd_local.c:655 logsrvd/logsrvd_local.c:690
 #: plugins/sudoers/sudoreplay.c:351
 #, c-format
 msgid "%s/%s: %s"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:577
+#: logsrvd/logsrvd_local.c:618
 msgid "randomly dropping connection"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:589
+#: logsrvd/logsrvd_local.c:630
 msgid "error writing IoBuffer"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:624
+#: logsrvd/logsrvd_local.c:665
 msgid "error writing ChangeWindowSize"
 msgstr ""
 
-#: logsrvd/logsrvd_local.c:659
+#: logsrvd/logsrvd_local.c:700
 msgid "error writing CommandSuspend"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:430
+#: logsrvd/logsrvd_relay.c:435
 msgid "TLS handshake with relay host failed"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:458
+#: logsrvd/logsrvd_relay.c:463
 msgid "unable to connect to relay host"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:513
+#: logsrvd/logsrvd_relay.c:518
 #, c-format
 msgid "%s: invalid ServerHello, missing server_id"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:515 logsrvd/sendlog.c:1121
-#: plugins/sudoers/log_client.c:1504
+#: logsrvd/logsrvd_relay.c:520 logsrvd/sendlog.c:1096
+#: plugins/sudoers/log_client.c:1469
 msgid "invalid ServerHello"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:674
+#: logsrvd/logsrvd_relay.c:679
 msgid "unrecognized ServerMessage type"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:703
+#: logsrvd/logsrvd_relay.c:708
 #, c-format
 msgid "timed out reading from relay %s (%s)"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:705
+#: logsrvd/logsrvd_relay.c:710
 msgid "timeout reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:757
+#: logsrvd/logsrvd_relay.c:762
 msgid "relay host name does not match certificate"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:763 logsrvd/logsrvd_relay.c:777
-#: logsrvd/logsrvd_relay.c:784
+#: logsrvd/logsrvd_relay.c:768 logsrvd/logsrvd_relay.c:782
+#: logsrvd/logsrvd_relay.c:789
 msgid "error reading from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:805
+#: logsrvd/logsrvd_relay.c:810
 msgid "unable to read from relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:820 logsrvd/logsrvd_relay.c:938
+#: logsrvd/logsrvd_relay.c:825 logsrvd/logsrvd_relay.c:943
 msgid "relay server closed connection"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:838
+#: logsrvd/logsrvd_relay.c:843
 msgid "server message too large"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:902
+#: logsrvd/logsrvd_relay.c:907
 #, c-format
 msgid "timed out writing to relay %s (%s)"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:904
+#: logsrvd/logsrvd_relay.c:909
 msgid "timeout writing to relay"
 msgstr ""
 
-#: logsrvd/logsrvd_relay.c:957 logsrvd/logsrvd_relay.c:964
-#: logsrvd/logsrvd_relay.c:974
+#: logsrvd/logsrvd_relay.c:962 logsrvd/logsrvd_relay.c:969
+#: logsrvd/logsrvd_relay.c:981
 msgid "error writing to relay"
 msgstr ""
 
-#: logsrvd/sendlog.c:114
+#: logsrvd/sendlog.c:119
 msgid "send sudo I/O log to remote server"
 msgstr ""
 
-#: logsrvd/sendlog.c:120
+#: logsrvd/sendlog.c:125
 msgid "only send an accept event (no I/O)"
 msgstr ""
 
-#: logsrvd/sendlog.c:123
+#: logsrvd/sendlog.c:128
 msgid "certificate bundle file to verify server's cert against"
 msgstr ""
 
-#: logsrvd/sendlog.c:125
+#: logsrvd/sendlog.c:130
 msgid "certificate file for TLS handshake"
 msgstr ""
 
-#: logsrvd/sendlog.c:128
+#: logsrvd/sendlog.c:133
 msgid "host to send logs to"
 msgstr ""
 
-#: logsrvd/sendlog.c:130
+#: logsrvd/sendlog.c:135
 msgid "remote ID of I/O log to be resumed"
 msgstr ""
 
-#: logsrvd/sendlog.c:133
+#: logsrvd/sendlog.c:138
 msgid "private key file"
 msgstr ""
 
-#: logsrvd/sendlog.c:135
+#: logsrvd/sendlog.c:140
 msgid "do not verify server certificate"
 msgstr ""
 
-#: logsrvd/sendlog.c:138
+#: logsrvd/sendlog.c:143
 msgid "port to use when connecting to host"
 msgstr ""
 
-#: logsrvd/sendlog.c:140
+#: logsrvd/sendlog.c:145
 msgid "restart previous I/O log transfer"
 msgstr ""
 
-#: logsrvd/sendlog.c:142
+#: logsrvd/sendlog.c:147
 msgid "reject the command with the given reason"
 msgstr ""
 
-#: logsrvd/sendlog.c:144
+#: logsrvd/sendlog.c:149
 msgid "stop transfer after reaching this time"
 msgstr ""
 
-#: logsrvd/sendlog.c:146
+#: logsrvd/sendlog.c:151
 msgid "test audit server by sending selected I/O log n times in parallel"
 msgstr ""
 
-#: logsrvd/sendlog.c:171 plugins/sudoers/log_client.c:448
+#: logsrvd/sendlog.c:176 plugins/sudoers/log_client.c:453
 #, c-format
 msgid "unable to look up %s:%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:209
+#: logsrvd/sendlog.c:214
 msgid "unable to get server IP addr"
 msgstr ""
 
-#: logsrvd/sendlog.c:295 plugins/sudoers/sudoreplay.c:871
+#: logsrvd/sendlog.c:300 plugins/sudoers/sudoreplay.c:871
 #, c-format
 msgid "unable to read %s/%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1045 plugins/sudoers/iolog.c:949
-#: plugins/sudoers/iolog.c:1024
+#: logsrvd/sendlog.c:1020 plugins/sudoers/iolog.c:951
+#: plugins/sudoers/iolog.c:1026
 #, c-format
 msgid "unexpected I/O event %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1098 logsrvd/sendlog.c:1115 logsrvd/sendlog.c:1149
-#: plugins/sudoers/log_client.c:1153 plugins/sudoers/log_client.c:1430
-#: plugins/sudoers/log_client.c:1498 plugins/sudoers/log_client.c:1537
+#: logsrvd/sendlog.c:1073 logsrvd/sendlog.c:1090 logsrvd/sendlog.c:1124
+#: plugins/sudoers/log_client.c:1118 plugins/sudoers/log_client.c:1395
+#: plugins/sudoers/log_client.c:1463 plugins/sudoers/log_client.c:1502
 #, c-format
 msgid "%s: unexpected state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1185 plugins/sudoers/log_client.c:1586
+#: logsrvd/sendlog.c:1160 plugins/sudoers/log_client.c:1551
 #, c-format
 msgid "error message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1198 plugins/sudoers/log_client.c:1599
+#: logsrvd/sendlog.c:1173 plugins/sudoers/log_client.c:1564
 #, c-format
 msgid "abort message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1257 plugins/sudoers/log_client.c:1649
+#: logsrvd/sendlog.c:1232 plugins/sudoers/log_client.c:1614
 #, c-format
 msgid "%s: unexpected type_case value %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1286
+#: logsrvd/sendlog.c:1261
 msgid "timeout reading from server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1335 plugins/sudoers/log_client.c:1765
+#: logsrvd/sendlog.c:1310 plugins/sudoers/log_client.c:1730
 msgid "host name does not match certificate"
 msgstr ""
 
-#: logsrvd/sendlog.c:1368
+#: logsrvd/sendlog.c:1343
 msgid "premature EOF"
 msgstr ""
 
-#: logsrvd/sendlog.c:1381 plugins/sudoers/log_client.c:1812
+#: logsrvd/sendlog.c:1356 plugins/sudoers/log_client.c:1777
 #, c-format
 msgid "server message too large: %u"
 msgstr ""
 
-#: logsrvd/sendlog.c:1437
+#: logsrvd/sendlog.c:1412
 msgid "timeout writing to server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1802
+#: logsrvd/sendlog.c:1779
 msgid "both restart point and iolog ID must be specified"
 msgstr ""
 
-#: logsrvd/sendlog.c:1806
+#: logsrvd/sendlog.c:1783
 msgid "a restart point may not be set when no I/O is sent"
 msgstr ""
 
-#: logsrvd/sendlog.c:1882
+#: logsrvd/sendlog.c:1859
 #, c-format
 msgid "exited prematurely with state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1883
+#: logsrvd/sendlog.c:1860
 #, c-format
 msgid "elapsed time sent to server [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/sendlog.c:1885
+#: logsrvd/sendlog.c:1862
 #, c-format
 msgid "commit point received from server [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/tls_client.c:106 plugins/sudoers/log_client.c:310
+#: logsrvd/tls_client.c:111 plugins/sudoers/log_client.c:315
 msgid "TLS handshake timeout occurred"
 msgstr ""
 
-#: logsrvd/tls_client.c:126 logsrvd/tls_client.c:142
-#: plugins/sudoers/log_client.c:332 plugins/sudoers/log_client.c:348
+#: logsrvd/tls_client.c:131 logsrvd/tls_client.c:147
+#: plugins/sudoers/log_client.c:337 plugins/sudoers/log_client.c:353
 msgid "unable to set event"
 msgstr ""
 
-#: logsrvd/tls_client.c:152 logsrvd/tls_client.c:156
+#: logsrvd/tls_client.c:157 logsrvd/tls_client.c:161
 #, c-format
 msgid "TLS connection failed: %s"
 msgstr ""
 
-#: logsrvd/tls_client.c:191
+#: logsrvd/tls_client.c:196
 #, c-format
 msgid "unable to allocate ssl object: %s"
 msgstr ""
 
-#: logsrvd/tls_client.c:205
+#: logsrvd/tls_client.c:210
 #, c-format
 msgid "Unable to attach socket to the ssl object: %s"
 msgstr ""
 
-#: logsrvd/tls_client.c:233
+#: logsrvd/tls_client.c:238
 msgid "unable to initialize TLS context"
 msgstr ""
 
-#: logsrvd/tls_init.c:132 logsrvd/tls_init.c:140
+#: logsrvd/tls_init.c:138 logsrvd/tls_init.c:146
 #, c-format
 msgid "unable to set TLS 1.2 ciphersuite to %s: %s"
 msgstr ""
 
-#: logsrvd/tls_init.c:160 logsrvd/tls_init.c:168
+#: logsrvd/tls_init.c:166 logsrvd/tls_init.c:174
 #, c-format
 msgid "unable to set TLS 1.3 ciphersuite to %s: %s"
 msgstr ""
 
-#: logsrvd/tls_init.c:200 logsrvd/tls_init.c:221
+#: logsrvd/tls_init.c:206 logsrvd/tls_init.c:227
 #, c-format
 msgid "unable to set diffie-hellman parameters: %s"
 msgstr ""
 
-#: logsrvd/tls_init.c:277
+#: logsrvd/tls_init.c:283
 #, c-format
 msgid "unable to create TLS context: %s"
 msgstr ""
 
-#: logsrvd/tls_init.c:284
+#: logsrvd/tls_init.c:290
 #, c-format
 msgid "unable to set minimum protocol version to TLS 1.2: %s"
 msgstr ""
 
-#: plugins/sudoers/audit.c:267 plugins/sudoers/audit.c:419
-#: plugins/sudoers/log_client.c:986 plugins/sudoers/log_client.c:1035
-#: plugins/sudoers/log_client.c:1084 plugins/sudoers/log_client.c:1210
-#: plugins/sudoers/logging.c:599 plugins/sudoers/logging.c:696
-#: plugins/sudoers/logging.c:800 plugins/sudoers/logging.c:989
-#: plugins/sudoers/policy.c:123
+#: plugins/sudoers/audit.c:269 plugins/sudoers/audit.c:429
+#: plugins/sudoers/log_client.c:951 plugins/sudoers/log_client.c:1000
+#: plugins/sudoers/log_client.c:1049 plugins/sudoers/log_client.c:1175
+#: plugins/sudoers/logging.c:591 plugins/sudoers/logging.c:689
+#: plugins/sudoers/logging.c:792 plugins/sudoers/logging.c:983
+#: plugins/sudoers/policy.c:124
 msgid "unable to get time of day"
 msgstr ""
 
@@ -1498,7 +1559,7 @@ msgstr ""
 msgid "PAM account management error: %s"
 msgstr ""
 
-#: plugins/sudoers/auth/rfc1938.c:99 plugins/sudoers/visudo.c:266
+#: plugins/sudoers/auth/rfc1938.c:99 plugins/sudoers/visudo.c:271
 #, c-format
 msgid "you do not exist in the %s database"
 msgstr ""
@@ -1575,17 +1636,17 @@ msgstr ""
 msgid "unable to commit audit record"
 msgstr ""
 
-#: plugins/sudoers/check.c:275
+#: plugins/sudoers/check.c:285
 #, c-format
 msgid "error reading lecture file %s"
 msgstr ""
 
-#: plugins/sudoers/check.c:278
+#: plugins/sudoers/check.c:288
 #, c-format
 msgid "ignoring lecture file %s: not a regular file"
 msgstr ""
 
-#: plugins/sudoers/check.c:291
+#: plugins/sudoers/check.c:301
 msgid ""
 "\n"
 "We trust you have received the usual lecture from the local System\n"
@@ -1597,14 +1658,14 @@ msgid ""
 "\n"
 msgstr ""
 
-#: plugins/sudoers/check.c:342 plugins/sudoers/check.c:352
-#: plugins/sudoers/parse.c:64 plugins/sudoers/sudoers.c:901
-#: plugins/sudoers/sudoers.c:922 plugins/sudoers/tsdump.c:119
+#: plugins/sudoers/check.c:348 plugins/sudoers/check.c:358
+#: plugins/sudoers/parse.c:64 plugins/sudoers/sudoers.c:920
+#: plugins/sudoers/sudoers.c:941 plugins/sudoers/tsdump.c:119
 #, c-format
 msgid "unknown uid %u"
 msgstr ""
 
-#: plugins/sudoers/check_aliases.c:99 plugins/sudoers/defaults.c:1278
+#: plugins/sudoers/check_aliases.c:99 plugins/sudoers/defaults.c:1279
 #, c-format
 msgid "%s: %s\n"
 msgstr ""
@@ -1634,7 +1695,7 @@ msgstr ""
 msgid "order padding: %s: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:248 plugins/sudoers/visudo.c:182
+#: plugins/sudoers/cvtsudoers.c:248 plugins/sudoers/visudo.c:184
 #, c-format
 msgid "%s grammar version %d\n"
 msgstr ""
@@ -1654,14 +1715,14 @@ msgstr ""
 msgid "%s: input and output files must be different"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:399 plugins/sudoers/sudoers.c:165
-#: plugins/sudoers/sudoers.c:217 plugins/sudoers/testsudoers.c:254
-#: plugins/sudoers/visudo.c:275 plugins/sudoers/visudo.c:644
-#: plugins/sudoers/visudo.c:969
+#: plugins/sudoers/cvtsudoers.c:399 plugins/sudoers/sudoers.c:166
+#: plugins/sudoers/sudoers.c:222 plugins/sudoers/testsudoers.c:254
+#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:650
+#: plugins/sudoers/visudo.c:975
 msgid "unable to initialize sudoers default values"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:525 plugins/sudoers/ldap_conf.c:433
+#: plugins/sudoers/cvtsudoers.c:525 plugins/sudoers/ldap_conf.c:434
 #, c-format
 msgid "%s: %s: %s: %s"
 msgstr ""
@@ -1686,25 +1747,25 @@ msgstr ""
 msgid "invalid filter: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:754 plugins/sudoers/visudo.c:974
+#: plugins/sudoers/cvtsudoers.c:754 plugins/sudoers/visudo.c:980
 #, c-format
 msgid "failed to parse %s file, unknown error"
 msgstr ""
 
 #: plugins/sudoers/cvtsudoers.c:1478 plugins/sudoers/sudoreplay.c:1145
-#: plugins/sudoers/timestamp.c:317 plugins/sudoers/timestamp.c:320
+#: plugins/sudoers/timestamp.c:343 plugins/sudoers/timestamp.c:346
 #, c-format
 msgid "unable to write to %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1501
+#: plugins/sudoers/cvtsudoers.c:1506
 #, c-format
 msgid ""
 "%s - convert between sudoers file formats\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1503
+#: plugins/sudoers/cvtsudoers.c:1508
 msgid ""
 "\n"
 "Options:\n"
@@ -2145,369 +2206,393 @@ msgid "Log user's input for the command being run"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:356
-msgid "Log the output of the command being run"
+msgid "Log the command's standard input if not connected to a terminal"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:360
-msgid "Compress I/O logs using zlib"
+msgid "Log the user's terminal input for the command being run"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:364
-msgid "Always run commands in a pseudo-tty"
+msgid "Log the output of the command being run"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:368
-#, c-format
-msgid "Plugin for non-Unix group support: %s"
+msgid "Log the command's standard output if not connected to a terminal"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:372
-#, c-format
-msgid "Directory in which to store input/output logs: %s"
+msgid "Log the command's standard error if not connected to a terminal"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:376
-#, c-format
-msgid "File in which to store the input/output log: %s"
+msgid "Log the terminal output of the command being run"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:380
-msgid "Add an entry to the utmp/utmpx file when allocating a pty"
+msgid "Compress I/O logs using zlib"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:384
-msgid "Set the user in utmp to the runas user, not the invoking user"
+msgid "Always run commands in a pseudo-tty"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:388
 #, c-format
-msgid "Set of permitted privileges: %s"
+msgid "Plugin for non-Unix group support: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:392
 #, c-format
-msgid "Set of limit privileges: %s"
+msgid "Directory in which to store input/output logs: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:396
-msgid "Run commands on a pty in the background"
+#, c-format
+msgid "File in which to store the input/output log: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:400
-#, c-format
-msgid "PAM service name to use: %s"
+msgid "Add an entry to the utmp/utmpx file when allocating a pty"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:404
-#, c-format
-msgid "PAM service name to use for login shells: %s"
+msgid "Set the user in utmp to the runas user, not the invoking user"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:408
 #, c-format
-msgid "PAM service name to use when sudo is run with the -A option: %s"
+msgid "Set of permitted privileges: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:412
-msgid "Attempt to establish PAM credentials for the target user"
+#, c-format
+msgid "Set of limit privileges: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:416
-msgid "Create a new PAM session for the command to run in"
+msgid "Run commands on a pty in the background"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:420
-msgid "Perform PAM account validation management"
+#, c-format
+msgid "PAM service name to use: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:424
 #, c-format
-msgid "Maximum I/O log sequence number: %s"
+msgid "PAM service name to use for login shells: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:428
-msgid "Enable sudoers netgroup support"
+#, c-format
+msgid "PAM service name to use when sudo is run with the -A option: %s"
 msgstr ""
 
 #: plugins/sudoers/def_data.c:432
+msgid "Attempt to establish PAM credentials for the target user"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:436
+msgid "Create a new PAM session for the command to run in"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:440
+msgid "Perform PAM account validation management"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:444
+#, c-format
+msgid "Maximum I/O log sequence number: %s"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:448
+msgid "Enable sudoers netgroup support"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:452
 msgid ""
 "Check parent directories for writability when editing files with sudoedit"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:436
+#: plugins/sudoers/def_data.c:456
 msgid "Follow symbolic links when editing files with sudoedit"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:440
+#: plugins/sudoers/def_data.c:460
 msgid "Query the group plugin for unknown system groups"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:444
+#: plugins/sudoers/def_data.c:464
 msgid "Match netgroups based on the entire tuple: user, host and domain"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:448
+#: plugins/sudoers/def_data.c:468
 msgid "Allow commands to be run even if sudo cannot write to the audit log"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:452
+#: plugins/sudoers/def_data.c:472
 msgid "Allow commands to be run even if sudo cannot write to the I/O log"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:456
+#: plugins/sudoers/def_data.c:476
 msgid "Allow commands to be run even if sudo cannot write to the log file"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:460
+#: plugins/sudoers/def_data.c:480
 msgid "Resolve groups in sudoers and match on the group ID, not the name"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:464
+#: plugins/sudoers/def_data.c:484
 #, c-format
 msgid ""
 "Log entries larger than this value will be split into multiple syslog "
 "messages: %u"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:468
+#: plugins/sudoers/def_data.c:488
 #, c-format
 msgid "User that will own the I/O log files: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:472
+#: plugins/sudoers/def_data.c:492
 #, c-format
 msgid "Group that will own the I/O log files: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:476
+#: plugins/sudoers/def_data.c:496
 #, c-format
 msgid "File mode to use for the I/O log files: 0%o"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:480
+#: plugins/sudoers/def_data.c:500
 #, c-format
 msgid "Execute commands by file descriptor instead of by path: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:484
+#: plugins/sudoers/def_data.c:504
 msgid ""
 "Ignore unknown Defaults entries in sudoers instead of producing a warning"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:488
+#: plugins/sudoers/def_data.c:508
 #, c-format
 msgid "Time in seconds after which the command will be terminated: %u"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:492
+#: plugins/sudoers/def_data.c:512
 msgid "Allow the user to specify a timeout on the command line"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:496
+#: plugins/sudoers/def_data.c:516
 msgid "Flush I/O log data to disk immediately instead of buffering it"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:500
+#: plugins/sudoers/def_data.c:520
 msgid "Include the process ID when logging via syslog"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:504
+#: plugins/sudoers/def_data.c:524
 #, c-format
 msgid "Type of authentication timestamp record: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:508
+#: plugins/sudoers/def_data.c:528
 #, c-format
 msgid "Authentication failure message: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:512
+#: plugins/sudoers/def_data.c:532
 msgid "Ignore case when matching user names"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:516
+#: plugins/sudoers/def_data.c:536
 msgid "Ignore case when matching group names"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:520
+#: plugins/sudoers/def_data.c:540
 msgid "Log when a command is allowed by sudoers"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:524
+#: plugins/sudoers/def_data.c:544
 msgid "Log when a command is denied by sudoers"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:528
+#: plugins/sudoers/def_data.c:548
 msgid "Sudo log server(s) to connect to with optional port"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:532
+#: plugins/sudoers/def_data.c:552
 #, c-format
 msgid "Sudo log server timeout in seconds: %u"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:536
+#: plugins/sudoers/def_data.c:556
 msgid ""
 "Enable SO_KEEPALIVE socket option on the socket connected to the logserver"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:540
+#: plugins/sudoers/def_data.c:560
 #, c-format
 msgid "Path to the audit server's CA bundle file: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:544
+#: plugins/sudoers/def_data.c:564
 #, c-format
 msgid "Path to the sudoers certificate file: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:548
+#: plugins/sudoers/def_data.c:568
 #, c-format
 msgid "Path to the sudoers private key file: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:552
+#: plugins/sudoers/def_data.c:572
 msgid "Verify that the log server's certificate is valid"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:556
+#: plugins/sudoers/def_data.c:576
 msgid "Allow the use of unknown runas user and/or group ID"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:560
+#: plugins/sudoers/def_data.c:580
 msgid "Only permit running commands as a user with a valid shell"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:564
+#: plugins/sudoers/def_data.c:584
 msgid "Set the pam remote user to the user running sudo"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:568
+#: plugins/sudoers/def_data.c:588
 msgid "Set the pam remote host to the local host name"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:572
+#: plugins/sudoers/def_data.c:592
 #, c-format
 msgid "Working directory to change to before executing the command: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:576
+#: plugins/sudoers/def_data.c:596
 #, c-format
 msgid "Root directory to change to before executing the command: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:580
+#: plugins/sudoers/def_data.c:600
 #, c-format
 msgid "The format of logs to produce: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:584
+#: plugins/sudoers/def_data.c:604
 msgid "Enable SELinux RBAC support"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:588
+#: plugins/sudoers/def_data.c:608
 #, c-format
 msgid "Path to the file that is created the first time sudo is run: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:592
+#: plugins/sudoers/def_data.c:612
 msgid "Intercept further commands and apply sudoers restrictions to them"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:596
+#: plugins/sudoers/def_data.c:616
 msgid "Log sub-commands run by the original command"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:600
+#: plugins/sudoers/def_data.c:620
 msgid "Log the exit status of commands"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:604
+#: plugins/sudoers/def_data.c:624
 msgid "Subsequent commands in an intercepted session must be authenticated"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:608
+#: plugins/sudoers/def_data.c:628
 msgid "Allow an intercepted command to run set setuid or setgid programs"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:612
+#: plugins/sudoers/def_data.c:632
 #, c-format
 msgid ""
 "The maximum size to which the process's address space may grow (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:616
+#: plugins/sudoers/def_data.c:636
 #, c-format
 msgid "The largest size core dump file that may be created (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:620
+#: plugins/sudoers/def_data.c:640
 #, c-format
 msgid ""
 "The maximum amount of CPU time that the process may use (in seconds): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:624
+#: plugins/sudoers/def_data.c:644
 #, c-format
 msgid "The maximum size of the data segment for the process (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:628
+#: plugins/sudoers/def_data.c:648
 #, c-format
 msgid "The largest size file that the process may create (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:632
+#: plugins/sudoers/def_data.c:652
 #, c-format
 msgid "The maximum number of locks that the process may establish: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:636
+#: plugins/sudoers/def_data.c:656
 #, c-format
 msgid "The maximum size that the process may lock in memory (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:640
+#: plugins/sudoers/def_data.c:660
 #, c-format
 msgid "The maximum number of files that the process may have open: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:644
+#: plugins/sudoers/def_data.c:664
 #, c-format
 msgid ""
 "The maximum number of processes that the user may run simultaneously: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:648
+#: plugins/sudoers/def_data.c:668
 #, c-format
 msgid ""
 "The maximum size to which the process's resident set size may grow (in "
 "bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:652
+#: plugins/sudoers/def_data.c:672
 #, c-format
 msgid "The maximum size to which the process's stack may grow (in bytes): %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:656
+#: plugins/sudoers/def_data.c:676
 msgid "Attempt authentication even when in non-interactive mode"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:660
+#: plugins/sudoers/def_data.c:680
 msgid "Store plaintext passwords in I/O log input"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:664
+#: plugins/sudoers/def_data.c:684
 msgid "List of regular expressions to use when matching a password prompt"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:668
+#: plugins/sudoers/def_data.c:688
 #, c-format
 msgid "The mechanism used by the intercept and log_subcmds options: %s"
 msgstr ""
 
-#: plugins/sudoers/def_data.c:672
+#: plugins/sudoers/def_data.c:692
+msgid "Attempt to verify the command and arguments after execution"
+msgstr ""
+
+#: plugins/sudoers/def_data.c:696
 #, c-format
 msgid "AppArmor profile to use in the new security context: %s"
 msgstr ""
@@ -2542,31 +2627,31 @@ msgstr ""
 msgid "value \"%s\" is invalid for option \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1127 plugins/sudoers/policy.c:207
-#: plugins/sudoers/policy.c:216
+#: plugins/sudoers/defaults.c:1128 plugins/sudoers/policy.c:208
+#: plugins/sudoers/policy.c:217
 #, c-format
 msgid "path name for \"%s\" too long"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1133
+#: plugins/sudoers/defaults.c:1134
 #, c-format
 msgid "values for \"%s\" must start with a '/', '~', or '*'"
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1140
+#: plugins/sudoers/defaults.c:1141
 #, c-format
 msgid "values for \"%s\" must start with a '/'"
 msgstr ""
 
-#: plugins/sudoers/env.c:412
+#: plugins/sudoers/env.c:426
 msgid "sudo_putenv: corrupted envp, length mismatch"
 msgstr ""
 
-#: plugins/sudoers/env.c:1095
+#: plugins/sudoers/env.c:1109
 msgid "unable to rebuild the environment"
 msgstr ""
 
-#: plugins/sudoers/env.c:1169
+#: plugins/sudoers/env.c:1183
 #, c-format
 msgid ""
 "sorry, you are not allowed to set the following environment variables: %s"
@@ -2582,27 +2667,27 @@ msgstr ""
 msgid "%s: read error"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:83
+#: plugins/sudoers/group_plugin.c:169
 #, c-format
 msgid "%s must be owned by uid %d"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:87
+#: plugins/sudoers/group_plugin.c:173
 #, c-format
 msgid "%s must only be writable by owner"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:96 plugins/sudoers/sssd.c:576
+#: plugins/sudoers/group_plugin.c:185 plugins/sudoers/sssd.c:576
 #, c-format
 msgid "unable to load %s: %s"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:102
+#: plugins/sudoers/group_plugin.c:197
 #, c-format
 msgid "unable to find symbol \"group_plugin\" in %s"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:107
+#: plugins/sudoers/group_plugin.c:202
 #, c-format
 msgid "%s: incompatible group plugin major version %d, expected %d"
 msgstr ""
@@ -2625,10 +2710,10 @@ msgstr ""
 msgid "unable to update sequence file"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:719 plugins/sudoers/iolog.c:907
-#: plugins/sudoers/iolog.c:1069 plugins/sudoers/iolog.c:1076
-#: plugins/sudoers/iolog.c:1197 plugins/sudoers/iolog.c:1204
-#: plugins/sudoers/iolog.c:1303 plugins/sudoers/iolog.c:1310
+#: plugins/sudoers/iolog.c:719 plugins/sudoers/iolog.c:909
+#: plugins/sudoers/iolog.c:1071 plugins/sudoers/iolog.c:1078
+#: plugins/sudoers/iolog.c:1199 plugins/sudoers/iolog.c:1206
+#: plugins/sudoers/iolog.c:1305 plugins/sudoers/iolog.c:1312
 #, c-format
 msgid "unable to write to I/O log file: %s"
 msgstr ""
@@ -2638,25 +2723,25 @@ msgstr ""
 msgid "unable to create %s/%s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:955
+#: plugins/sudoers/iolog.c:957
 #, c-format
 msgid "%s: internal error, I/O log file for event %d not open"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1054 plugins/sudoers/iolog.c:1182
-#: plugins/sudoers/iolog.c:1287 plugins/sudoers/timestamp.c:849
-#: plugins/sudoers/timestamp.c:941 plugins/sudoers/visudo.c:546
-#: plugins/sudoers/visudo.c:552
+#: plugins/sudoers/iolog.c:1056 plugins/sudoers/iolog.c:1184
+#: plugins/sudoers/iolog.c:1289 plugins/sudoers/timestamp.c:879
+#: plugins/sudoers/timestamp.c:971 plugins/sudoers/visudo.c:552
+#: plugins/sudoers/visudo.c:558
 msgid "unable to read the clock"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1279 plugins/sudoers/log_client.c:1228
-#: plugins/sudoers/log_client.c:1238 plugins/sudoers/log_client.c:1242
+#: plugins/sudoers/iolog.c:1281 plugins/sudoers/log_client.c:1193
+#: plugins/sudoers/log_client.c:1203 plugins/sudoers/log_client.c:1207
 #, c-format
 msgid "%s: internal error, invalid signal %d"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:177 plugins/sudoers/ldap_conf.c:291
+#: plugins/sudoers/ldap.c:177 plugins/sudoers/ldap_conf.c:292
 msgid "starttls not supported when using ldaps"
 msgstr ""
 
@@ -2681,7 +2766,7 @@ msgid ""
 "ldap_start_tls_s_np()"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1886 plugins/sudoers/parse_ldif.c:747
+#: plugins/sudoers/ldap.c:1886 plugins/sudoers/parse_ldif.c:748
 #, c-format
 msgid "invalid sudoOrder attribute: %s"
 msgstr ""
@@ -2691,12 +2776,12 @@ msgstr ""
 msgid "%s: port too large"
 msgstr ""
 
-#: plugins/sudoers/ldap_conf.c:260
+#: plugins/sudoers/ldap_conf.c:261
 #, c-format
 msgid "unsupported LDAP uri type: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap_conf.c:287
+#: plugins/sudoers/ldap_conf.c:288
 msgid "unable to mix ldap and ldaps URIs"
 msgstr ""
 
@@ -2721,142 +2806,142 @@ msgstr ""
 msgid "unable to send audit message"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:120 plugins/sudoers/log_client.c:407
-#: plugins/sudoers/log_client.c:1475 plugins/sudoers/log_client.c:2083
+#: plugins/sudoers/log_client.c:125 plugins/sudoers/log_client.c:412
+#: plugins/sudoers/log_client.c:1440 plugins/sudoers/log_client.c:2056
 msgid "error in event loop"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:200
+#: plugins/sudoers/log_client.c:205
 #, c-format
 msgid "Creation of new SSL_CTX object failed: %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:225
+#: plugins/sudoers/log_client.c:230
 #, c-format
 msgid "unable to load certificate authority bundle %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:247
+#: plugins/sudoers/log_client.c:252
 #, c-format
 msgid "unable to load certificate %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:261
+#: plugins/sudoers/log_client.c:266
 #, c-format
 msgid "unable to load private key %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:270
+#: plugins/sudoers/log_client.c:275
 #, c-format
 msgid "Unable to allocate ssl object: %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:359 plugins/sudoers/log_client.c:364
+#: plugins/sudoers/log_client.c:364 plugins/sudoers/log_client.c:369
 #, c-format
 msgid "TLS connection to %s:%s failed: %s"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:538
+#: plugins/sudoers/log_client.c:543
 msgid "TLS initialization was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:548
+#: plugins/sudoers/log_client.c:553
 msgid "TLS handshake was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1246
+#: plugins/sudoers/log_client.c:1211
 #, c-format
 msgid "%s: internal error, invalid exit status %d"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1775 plugins/sudoers/log_client.c:1799
+#: plugins/sudoers/log_client.c:1740 plugins/sudoers/log_client.c:1764
 msgid "lost connection to log server"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1876
+#: plugins/sudoers/log_client.c:1841
 msgid "missing write buffer"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:2024
+#: plugins/sudoers/log_client.c:1995
 msgid "unable to connect to log server"
 msgstr ""
 
-#: plugins/sudoers/logging.c:298
+#: plugins/sudoers/logging.c:290
 msgid "user NOT in sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:300
+#: plugins/sudoers/logging.c:292
 msgid "user NOT authorized on host"
 msgstr ""
 
-#: plugins/sudoers/logging.c:302
+#: plugins/sudoers/logging.c:294
 msgid "command not allowed"
 msgstr ""
 
-#: plugins/sudoers/logging.c:323
+#: plugins/sudoers/logging.c:315
 #, c-format
 msgid "%s is not in the sudoers file.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:326
+#: plugins/sudoers/logging.c:318
 #, c-format
 msgid "%s is not allowed to run sudo on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:329
+#: plugins/sudoers/logging.c:321
 #, c-format
 msgid "Sorry, user %s may not run sudo on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:332
+#: plugins/sudoers/logging.c:324
 #, c-format
 msgid "Sorry, user %s is not allowed to execute '%s%s%s' as %s%s%s on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:342
+#: plugins/sudoers/logging.c:334
 msgid "This incident has been reported to the administrator.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:373 plugins/sudoers/sudoers.c:643
-#: plugins/sudoers/sudoers.c:645 plugins/sudoers/sudoers.c:647
-#: plugins/sudoers/sudoers.c:649 plugins/sudoers/sudoers.c:799
-#: plugins/sudoers/sudoers.c:801
+#: plugins/sudoers/logging.c:365 plugins/sudoers/sudoers.c:648
+#: plugins/sudoers/sudoers.c:650 plugins/sudoers/sudoers.c:652
+#: plugins/sudoers/sudoers.c:654 plugins/sudoers/sudoers.c:805
+#: plugins/sudoers/sudoers.c:807
 #, c-format
 msgid "%s: command not found"
 msgstr ""
 
-#: plugins/sudoers/logging.c:375 plugins/sudoers/sudoers.c:639
+#: plugins/sudoers/logging.c:367 plugins/sudoers/sudoers.c:644
 #, c-format
 msgid ""
 "ignoring \"%s\" found in '.'\n"
 "Use \"sudo ./%s\" if this is the \"%s\" you wish to run."
 msgstr ""
 
-#: plugins/sudoers/logging.c:395
+#: plugins/sudoers/logging.c:387
 #, c-format
 msgid "%u incorrect password attempt"
 msgid_plural "%u incorrect password attempts"
 msgstr[0] ""
 msgstr[1] ""
 
-#: plugins/sudoers/logging.c:485
+#: plugins/sudoers/logging.c:477
 msgid "authentication failure"
 msgstr ""
 
-#: plugins/sudoers/logging.c:524 plugins/sudoers/logging.c:543
+#: plugins/sudoers/logging.c:516 plugins/sudoers/logging.c:535
 msgid "a password is required"
 msgstr ""
 
-#: plugins/sudoers/logging.c:806 plugins/sudoers/logging.c:818
+#: plugins/sudoers/logging.c:799 plugins/sudoers/logging.c:811
 msgid "problem parsing sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:879 plugins/sudoers/logging.c:891
+#: plugins/sudoers/logging.c:873 plugins/sudoers/logging.c:885
 #, c-format
 msgid "%s:%d:%d: %s"
 msgstr ""
 
-#: plugins/sudoers/logging.c:1068
+#: plugins/sudoers/logging.c:1062
 #, c-format
 msgid "unable to write log file: %s"
 msgstr ""
@@ -2871,150 +2956,150 @@ msgstr ""
 msgid "digest for %s (%s) is not in %s form"
 msgstr ""
 
-#: plugins/sudoers/parse.c:585
+#: plugins/sudoers/parse.c:591
 #, c-format
 msgid ""
 "\n"
 "LDAP Role: %s\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:588
+#: plugins/sudoers/parse.c:594
 msgid ""
 "\n"
 "Sudoers entry:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:590
+#: plugins/sudoers/parse.c:596
 msgid "    RunAsUsers: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:605
+#: plugins/sudoers/parse.c:611
 msgid "    RunAsGroups: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:615
+#: plugins/sudoers/parse.c:621
 msgid "    Options: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:679
+#: plugins/sudoers/parse.c:685
 msgid "    Commands:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:870
+#: plugins/sudoers/parse.c:876
 #, c-format
 msgid "Matching Defaults entries for %s on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:888
+#: plugins/sudoers/parse.c:894
 #, c-format
 msgid "Runas and Command-specific defaults for %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:906
+#: plugins/sudoers/parse.c:912
 #, c-format
 msgid "User %s may run the following commands on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:921
+#: plugins/sudoers/parse.c:927
 #, c-format
 msgid "User %s is not allowed to run sudo on %s.\n"
 msgstr ""
 
-#: plugins/sudoers/parse_ldif.c:617
+#: plugins/sudoers/parse_ldif.c:618
 #, c-format
 msgid "ignoring incomplete sudoRole: cn: %s"
 msgstr ""
 
-#: plugins/sudoers/parse_ldif.c:677
+#: plugins/sudoers/parse_ldif.c:678
 #, c-format
 msgid "invalid LDIF attribute: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:80 plugins/sudoers/policy.c:111
+#: plugins/sudoers/policy.c:81 plugins/sudoers/policy.c:112
 #, c-format
 msgid "invalid %.*s set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:351 plugins/sudoers/testsudoers.c:268
+#: plugins/sudoers/policy.c:358 plugins/sudoers/testsudoers.c:268
 msgid "unable to parse network address list"
 msgstr ""
 
-#: plugins/sudoers/policy.c:508
+#: plugins/sudoers/policy.c:526
 msgid "user name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:512
+#: plugins/sudoers/policy.c:530
 msgid "user-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:516
+#: plugins/sudoers/policy.c:534
 msgid "group-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:520
+#: plugins/sudoers/policy.c:538
 msgid "host name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:706
+#: plugins/sudoers/policy.c:730
 #, c-format
 msgid "invalid working directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:886
+#: plugins/sudoers/policy.c:914
 #, c-format
 msgid "invalid chroot directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1071 plugins/sudoers/visudo.c:254
-#: plugins/sudoers/visudo.c:896
+#: plugins/sudoers/policy.c:1101 plugins/sudoers/visudo.c:259
+#: plugins/sudoers/visudo.c:902
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1141 plugins/sudoers/policy.c:1178
-#: plugins/sudoers/policy.c:1200 plugins/sudoers/policy.c:1226
+#: plugins/sudoers/policy.c:1171 plugins/sudoers/policy.c:1208
+#: plugins/sudoers/policy.c:1230 plugins/sudoers/policy.c:1256
 #, c-format
 msgid "%s: invalid mode flags from sudo front end: 0x%x"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1262
+#: plugins/sudoers/policy.c:1292
 #, c-format
 msgid "Sudoers policy plugin version %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1264
+#: plugins/sudoers/policy.c:1294
 #, c-format
 msgid "Sudoers file grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1268
+#: plugins/sudoers/policy.c:1298
 #, c-format
 msgid ""
 "\n"
 "Sudoers path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1271
+#: plugins/sudoers/policy.c:1301
 #, c-format
 msgid "nsswitch path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1273
+#: plugins/sudoers/policy.c:1303
 #, c-format
 msgid "ldap.conf path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1274
+#: plugins/sudoers/policy.c:1304
 #, c-format
 msgid "ldap.secret path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1307
+#: plugins/sudoers/policy.c:1337
 #, c-format
 msgid "unable to register hook of type %d (version %d.%d)"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1325
+#: plugins/sudoers/policy.c:1355
 #, c-format
 msgid "unable to deregister hook of type %d (version %d.%d)"
 msgstr ""
@@ -3153,148 +3238,142 @@ msgstr ""
 msgid "unable to find symbol \"%s\" in %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:258
+#: plugins/sudoers/sudoers.c:263
 #, c-format
 msgid "unable to get defaults from %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:265
+#: plugins/sudoers/sudoers.c:270
 msgid "no valid sudoers sources found, quitting"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:341
+#: plugins/sudoers/sudoers.c:346
 #, c-format
 msgid "user not allowed to change root directory to %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:343
+#: plugins/sudoers/sudoers.c:348
 #, c-format
 msgid "you are not permitted to use the -R option with %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:368
+#: plugins/sudoers/sudoers.c:373
 #, c-format
 msgid "user not allowed to change directory to %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:369
+#: plugins/sudoers/sudoers.c:374
 #, c-format
 msgid "you are not permitted to use the -D option with %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:396
+#: plugins/sudoers/sudoers.c:401
 msgid "no command specified"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:421
+#: plugins/sudoers/sudoers.c:426
 msgid "sudoers specifies that root is not allowed to sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:471
+#: plugins/sudoers/sudoers.c:476
 msgid "user not allowed to override closefrom limit"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:472
+#: plugins/sudoers/sudoers.c:477
 msgid "you are not permitted to use the -C option"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:532
+#: plugins/sudoers/sudoers.c:537
 #, c-format
 msgid "timestamp owner (%s): No such user"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:547
+#: plugins/sudoers/sudoers.c:552
 msgid "no tty"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:548
+#: plugins/sudoers/sudoers.c:553
 msgid "sorry, you must have a tty to run sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:555
+#: plugins/sudoers/sudoers.c:560
 #, c-format
 msgid "invalid shell for user %s: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:638
+#: plugins/sudoers/sudoers.c:643
 msgid "command in current directory"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:653
+#: plugins/sudoers/sudoers.c:658
 msgid "\"cd\" is a shell built-in command, it cannot be run directly."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:655
+#: plugins/sudoers/sudoers.c:660
 msgid "the -s option may be used to run a privileged shell."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:657
+#: plugins/sudoers/sudoers.c:662
 msgid "the -D option may be used to run a command in a specific directory."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:666
+#: plugins/sudoers/sudoers.c:671
 msgid "user not allowed to set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:668
+#: plugins/sudoers/sudoers.c:673
 msgid "sorry, you are not allowed set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:676
+#: plugins/sudoers/sudoers.c:681
 msgid "user not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:678
+#: plugins/sudoers/sudoers.c:683
 msgid "sorry, you are not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1053
+#: plugins/sudoers/sudoers.c:1073
 msgid "sudoedit doesn't need to be run via sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1110 plugins/sudoers/sudoreplay.c:1584
+#: plugins/sudoers/sudoers.c:1118 plugins/sudoers/sudoreplay.c:1584
 #: plugins/sudoers/tsdump.c:138
 #, c-format
 msgid "unable to read %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1135 plugins/sudoers/visudo.c:485
-#: plugins/sudoers/visudo.c:764
-#, c-format
-msgid "unable to stat %s"
-msgstr ""
-
-#: plugins/sudoers/sudoers.c:1139 plugins/sudoers/visudo.c:1058
+#: plugins/sudoers/sudoers.c:1147 plugins/sudoers/visudo.c:1064
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1143 plugins/sudoers/timestamp.c:252 toke.l:1247
+#: plugins/sudoers/sudoers.c:1151 plugins/sudoers/timestamp.c:263 toke.l:1247
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1147 toke.l:1252
+#: plugins/sudoers/sudoers.c:1155 plugins/sudoers/timestamp.c:270 toke.l:1252
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1151 toke.l:1255
+#: plugins/sudoers/sudoers.c:1159 plugins/sudoers/timestamp.c:275 toke.l:1255
 #, c-format
 msgid "%s is owned by gid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1184
+#: plugins/sudoers/sudoers.c:1194
 #, c-format
 msgid "only root can use \"-c %s\""
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1203
+#: plugins/sudoers/sudoers.c:1213
 #, c-format
 msgid "unknown login class %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1290 plugins/sudoers/sudoers.c:1305
+#: plugins/sudoers/sudoers.c:1300 plugins/sudoers/sudoers.c:1315
 #, c-format
 msgid "unable to resolve host %s"
 msgstr ""
@@ -3392,24 +3471,24 @@ msgstr ""
 msgid "unknown search type %d"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1651
+#: plugins/sudoers/sudoreplay.c:1650
 #, c-format
 msgid "usage: %s [-hnRS] [-d dir] [-m num] [-s num] ID\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1654
+#: plugins/sudoers/sudoreplay.c:1652
 #, c-format
 msgid "usage: %s [-h] [-d dir] -l [search expression]\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1663
+#: plugins/sudoers/sudoreplay.c:1666
 #, c-format
 msgid ""
 "%s - replay sudo session logs\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1665
+#: plugins/sudoers/sudoreplay.c:1668
 msgid ""
 "\n"
 "Options:\n"
@@ -3448,127 +3527,122 @@ msgid ""
 "Command unmatched"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:260
-#, c-format
-msgid "%s is group writable"
-msgstr ""
-
-#: plugins/sudoers/timestamp.c:328 plugins/sudoers/timestamp.c:663
+#: plugins/sudoers/timestamp.c:354 plugins/sudoers/timestamp.c:693
 #, c-format
 msgid "unable to truncate time stamp file to %lld bytes"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:860
+#: plugins/sudoers/timestamp.c:890
 msgid "ignoring time stamp from the future"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:883
+#: plugins/sudoers/timestamp.c:913
 #, c-format
 msgid "time stamp too far in the future: %20.20s"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:1005
+#: plugins/sudoers/timestamp.c:1042
 #, c-format
 msgid "unable to lock time stamp file %s"
 msgstr ""
 
-#: plugins/sudoers/timestamp.c:1049 plugins/sudoers/timestamp.c:1069
-#, c-format
-msgid "lecture status path too long: %s/%s"
-msgstr ""
-
 #: plugins/sudoers/toke_util.c:156
 msgid "sudoedit should not be specified with a path"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:249
+#: plugins/sudoers/visudo.c:254
 msgid "the -x option will be removed in a future release"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:251
+#: plugins/sudoers/visudo.c:256
 msgid "please consider using the cvtsudoers utility instead"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:306 plugins/sudoers/visudo.c:692
+#: plugins/sudoers/visudo.c:311 plugins/sudoers/visudo.c:698
 #, c-format
 msgid "press return to edit %s: "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:321
+#: plugins/sudoers/visudo.c:326
 #, c-format
 msgid "contents of edit session left in %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:397
+#: plugins/sudoers/visudo.c:402
 #, c-format
 msgid "specified editor (%s) doesn't exist"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:399
+#: plugins/sudoers/visudo.c:404
 #, c-format
 msgid "no editor found (editor path = %s)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:505 plugins/sudoers/visudo.c:513
+#: plugins/sudoers/visudo.c:491 plugins/sudoers/visudo.c:770
+#, c-format
+msgid "unable to stat %s"
+msgstr ""
+
+#: plugins/sudoers/visudo.c:511 plugins/sudoers/visudo.c:519
 msgid "write error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:559
+#: plugins/sudoers/visudo.c:565
 #, c-format
 msgid "unable to stat temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:566
+#: plugins/sudoers/visudo.c:572
 #, c-format
 msgid "zero length temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:572
+#: plugins/sudoers/visudo.c:578
 #, c-format
 msgid "editor (%s) failed, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:594
+#: plugins/sudoers/visudo.c:600
 #, c-format
 msgid "%s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:639
+#: plugins/sudoers/visudo.c:645
 #, c-format
 msgid "unable to re-open temporary file (%s), %s unchanged."
 msgstr ""
 
-#: plugins/sudoers/visudo.c:652
+#: plugins/sudoers/visudo.c:658
 #, c-format
 msgid "unable to parse temporary file (%s), unknown error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:738 plugins/sudoers/visudo.c:768
-#: plugins/sudoers/visudo.c:775
+#: plugins/sudoers/visudo.c:744 plugins/sudoers/visudo.c:774
+#: plugins/sudoers/visudo.c:781
 #, c-format
 msgid "unable to set (uid, gid) of %s to (%u, %u)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:803
+#: plugins/sudoers/visudo.c:809
 #, c-format
 msgid "%s and %s not on the same file system, using mv to rename"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:814
+#: plugins/sudoers/visudo.c:820
 #, c-format
 msgid "command failed: '%s %s %s', %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:821
+#: plugins/sudoers/visudo.c:827
 #, c-format
 msgid "error renaming %s, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:841
+#: plugins/sudoers/visudo.c:847
 msgid "What now? "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:855
+#: plugins/sudoers/visudo.c:861
 msgid ""
 "Options are:\n"
 "  (e)dit sudoers file again\n"
@@ -3576,54 +3650,55 @@ msgid ""
 "  (Q)uit and save changes to sudoers file (DANGER!)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:901
+#: plugins/sudoers/visudo.c:907
 #, c-format
 msgid "unable to run %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:932
+#: plugins/sudoers/visudo.c:938
 #, c-format
 msgid "%s: wrong owner (uid, gid) should be (%u, %u)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:943
+#: plugins/sudoers/visudo.c:949
 #, c-format
 msgid "%s: bad permissions, should be mode 0%o\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:991 plugins/sudoers/visudo.c:998
+#: plugins/sudoers/visudo.c:997 plugins/sudoers/visudo.c:1004
 #, c-format
 msgid "%s: parsed OK\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1017
+#: plugins/sudoers/visudo.c:1023
 #, c-format
 msgid "%s busy, try again later"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1021
+#: plugins/sudoers/visudo.c:1027
 msgid "Edit anyway? [y/N]"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1117
+#: plugins/sudoers/visudo.c:1128
 #, c-format
 msgid "Warning: %s:%d:%d: unused %s \"%s\""
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1229
+#: plugins/sudoers/visudo.c:1240
 #, c-format
 msgid ""
 "%s - safely edit the sudoers file\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1231
+#: plugins/sudoers/visudo.c:1242
 msgid ""
 "\n"
 "Options:\n"
 "  -c, --check              check-only mode\n"
 "  -f, --file=sudoers       specify sudoers file location\n"
 "  -h, --help               display help message and exit\n"
+"  -I, --no-includes        do not edit include files\n"
 "  -q, --quiet              less verbose (quiet) syntax error messages\n"
 "  -s, --strict             strict syntax checking\n"
 "  -V, --version            display version information and exit\n"
diff --git a/po/sudo.pot b/po/sudo.pot
index 4d00bd8bf..cc7a6307f 100644
--- a/po/sudo.pot
+++ b/po/sudo.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.11\n"
+"Project-Id-Version: sudo 1.9.12\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2022-05-27 08:39-0600\n"
+"POT-Creation-Date: 2022-10-09 09:48-0600\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -30,76 +30,75 @@ msgid "unable to restore registry"
 msgstr ""
 
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/gidlist.c:76
-#: lib/util/json.c:54 lib/util/json.c:183 lib/util/sudo_conf.c:218
-#: lib/util/sudo_conf.c:304 lib/util/sudo_conf.c:381 lib/util/sudo_conf.c:665
-#: src/conversation.c:80 src/exec_monitor.c:205 src/exec_monitor.c:458
+#: lib/util/json.c:54 lib/util/json.c:183 lib/util/sudo_conf.c:219
+#: lib/util/sudo_conf.c:305 lib/util/sudo_conf.c:382 lib/util/sudo_conf.c:666
+#: src/conversation.c:80 src/exec_iolog.c:124 src/exec_iolog.c:135
+#: src/exec_iolog.c:212 src/exec_monitor.c:205 src/exec_monitor.c:458
 #: src/exec_monitor.c:464 src/exec_monitor.c:472 src/exec_monitor.c:480
 #: src/exec_monitor.c:487 src/exec_monitor.c:494 src/exec_monitor.c:501
 #: src/exec_monitor.c:508 src/exec_monitor.c:515 src/exec_monitor.c:522
-#: src/exec_monitor.c:529 src/exec_nopty.c:224 src/exec_nopty.c:233
-#: src/exec_nopty.c:240 src/exec_nopty.c:247 src/exec_nopty.c:254
-#: src/exec_nopty.c:261 src/exec_nopty.c:268 src/exec_nopty.c:275
-#: src/exec_nopty.c:282 src/exec_nopty.c:289 src/exec_nopty.c:296
-#: src/exec_nopty.c:303 src/exec_nopty.c:311 src/exec_nopty.c:549
-#: src/exec_preload.c:143 src/exec_preload.c:204 src/exec_ptrace.c:632
-#: src/exec_ptrace.c:730 src/exec_ptrace.c:895 src/exec_pty.c:845
-#: src/exec_pty.c:854 src/exec_pty.c:911 src/exec_pty.c:1075
-#: src/exec_pty.c:1265 src/exec_pty.c:1274 src/exec_pty.c:1281
-#: src/exec_pty.c:1288 src/exec_pty.c:1295 src/exec_pty.c:1302
-#: src/exec_pty.c:1309 src/exec_pty.c:1316 src/exec_pty.c:1323
-#: src/exec_pty.c:1330 src/exec_pty.c:1337 src/exec_pty.c:1345
-#: src/exec_pty.c:1811 src/load_plugins.c:156 src/load_plugins.c:181
-#: src/load_plugins.c:217 src/load_plugins.c:449 src/load_plugins.c:455
-#: src/parse_args.c:169 src/parse_args.c:190 src/parse_args.c:264
-#: src/parse_args.c:613 src/parse_args.c:635 src/parse_args.c:660
-#: src/preserve_fds.c:46 src/preserve_fds.c:131 src/selinux.c:89
-#: src/selinux.c:362 src/selinux.c:474 src/selinux.c:485 src/sesh.c:113
-#: src/sesh.c:146 src/sesh.c:152 src/sesh.c:159 src/sesh.c:165 src/sesh.c:410
-#: src/sudo.c:639 src/sudo.c:712 src/sudo.c:722 src/sudo.c:748 src/sudo.c:771
-#: src/sudo.c:780 src/sudo.c:789 src/sudo.c:806 src/sudo.c:848 src/sudo.c:858
-#: src/sudo.c:891 src/sudo.c:1100 src/sudo.c:1121 src/sudo.c:1414
-#: src/sudo.c:1583 src/sudo.c:1810 src/sudo.c:2144 src/sudo_edit.c:89
-#: src/sudo_edit.c:149 src/sudo_edit.c:429 src/sudo_edit.c:438
-#: src/sudo_edit.c:539 src/sudo_edit.c:546 src/sudo_edit.c:677
-#: src/sudo_edit.c:697 src/sudo_intercept_common.c:113
-#: src/sudo_intercept_common.c:317
+#: src/exec_monitor.c:529 src/exec_nopty.c:227 src/exec_nopty.c:236
+#: src/exec_nopty.c:243 src/exec_nopty.c:250 src/exec_nopty.c:257
+#: src/exec_nopty.c:264 src/exec_nopty.c:271 src/exec_nopty.c:278
+#: src/exec_nopty.c:285 src/exec_nopty.c:292 src/exec_nopty.c:299
+#: src/exec_nopty.c:306 src/exec_nopty.c:314 src/exec_nopty.c:322
+#: src/exec_nopty.c:732 src/exec_preload.c:341 src/exec_ptrace.c:474
+#: src/exec_ptrace.c:767 src/exec_ptrace.c:982 src/exec_ptrace.c:1094
+#: src/exec_ptrace.c:1269 src/exec_ptrace.c:1611 src/exec_ptrace.c:1638
+#: src/exec_pty.c:506 src/exec_pty.c:687 src/exec_pty.c:873 src/exec_pty.c:882
+#: src/exec_pty.c:889 src/exec_pty.c:896 src/exec_pty.c:903 src/exec_pty.c:910
+#: src/exec_pty.c:917 src/exec_pty.c:924 src/exec_pty.c:931 src/exec_pty.c:938
+#: src/exec_pty.c:945 src/exec_pty.c:953 src/load_plugins.c:157
+#: src/load_plugins.c:182 src/load_plugins.c:218 src/load_plugins.c:451
+#: src/load_plugins.c:457 src/parse_args.c:172 src/parse_args.c:193
+#: src/parse_args.c:267 src/parse_args.c:623 src/parse_args.c:645
+#: src/parse_args.c:670 src/preserve_fds.c:46 src/preserve_fds.c:131
+#: src/selinux.c:89 src/selinux.c:362 src/selinux.c:472 src/selinux.c:489
+#: src/selinux.c:496 src/sesh.c:206 src/sesh.c:240 src/sesh.c:246
+#: src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:639 src/sudo.c:704
+#: src/sudo.c:714 src/sudo.c:741 src/sudo.c:764 src/sudo.c:773 src/sudo.c:782
+#: src/sudo.c:799 src/sudo.c:841 src/sudo.c:851 src/sudo.c:884 src/sudo.c:1112
+#: src/sudo.c:1133 src/sudo.c:1426 src/sudo.c:1595 src/sudo.c:1822
+#: src/sudo.c:2156 src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:429
+#: src/sudo_edit.c:438 src/sudo_edit.c:538 src/sudo_edit.c:545
+#: src/sudo_edit.c:673 src/sudo_edit.c:693 src/sudo_intercept_common.c:115
+#: src/sudo_intercept_common.c:340
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/json.c:55
 #: lib/util/json.c:184 lib/util/regex.c:113 lib/util/regex.c:121
-#: lib/util/sudo_conf.c:219 lib/util/sudo_conf.c:304 lib/util/sudo_conf.c:381
-#: lib/util/sudo_conf.c:665 src/conversation.c:81 src/exec_intercept.c:68
-#: src/exec_intercept.c:336 src/exec_intercept.c:359 src/exec_intercept.c:367
-#: src/exec_intercept.c:392 src/exec_intercept.c:398 src/exec_intercept.c:407
-#: src/exec_intercept.c:413 src/exec_intercept.c:478 src/exec_intercept.c:588
-#: src/exec_intercept.c:707 src/exec_monitor.c:458 src/exec_monitor.c:464
-#: src/exec_monitor.c:472 src/exec_monitor.c:480 src/exec_monitor.c:487
-#: src/exec_monitor.c:494 src/exec_monitor.c:501 src/exec_monitor.c:508
-#: src/exec_monitor.c:515 src/exec_monitor.c:522 src/exec_monitor.c:529
-#: src/exec_nopty.c:224 src/exec_nopty.c:233 src/exec_nopty.c:240
-#: src/exec_nopty.c:247 src/exec_nopty.c:254 src/exec_nopty.c:261
-#: src/exec_nopty.c:268 src/exec_nopty.c:275 src/exec_nopty.c:282
-#: src/exec_nopty.c:289 src/exec_nopty.c:296 src/exec_nopty.c:303
-#: src/exec_nopty.c:311 src/exec_preload.c:143 src/exec_preload.c:204
-#: src/exec_ptrace.c:632 src/exec_pty.c:845 src/exec_pty.c:854
-#: src/exec_pty.c:911 src/exec_pty.c:1265 src/exec_pty.c:1274
-#: src/exec_pty.c:1281 src/exec_pty.c:1288 src/exec_pty.c:1295
-#: src/exec_pty.c:1302 src/exec_pty.c:1309 src/exec_pty.c:1316
-#: src/exec_pty.c:1323 src/exec_pty.c:1330 src/exec_pty.c:1337
-#: src/exec_pty.c:1345 src/exec_pty.c:1811 src/load_plugins.c:156
-#: src/load_plugins.c:181 src/load_plugins.c:217 src/load_plugins.c:449
-#: src/load_plugins.c:455 src/parse_args.c:169 src/parse_args.c:191
-#: src/parse_args.c:264 src/parse_args.c:613 src/parse_args.c:635
-#: src/parse_args.c:660 src/preserve_fds.c:46 src/preserve_fds.c:131
-#: src/selinux.c:89 src/selinux.c:362 src/selinux.c:474 src/selinux.c:485
-#: src/sesh.c:113 src/sesh.c:411 src/sudo.c:230 src/sudo.c:639 src/sudo.c:891
-#: src/sudo.c:1100 src/sudo.c:1121 src/sudo.c:1414 src/sudo.c:1583
-#: src/sudo.c:1810 src/sudo.c:2144 src/sudo_edit.c:89 src/sudo_edit.c:149
-#: src/sudo_edit.c:429 src/sudo_edit.c:438 src/sudo_edit.c:539
-#: src/sudo_edit.c:546 src/sudo_edit.c:677 src/sudo_edit.c:697
-#: src/sudo_intercept_common.c:113 src/sudo_intercept_common.c:317
+#: lib/util/sudo_conf.c:220 lib/util/sudo_conf.c:305 lib/util/sudo_conf.c:382
+#: lib/util/sudo_conf.c:666 src/conversation.c:81 src/exec_intercept.c:111
+#: src/exec_intercept.c:344 src/exec_intercept.c:504 src/exec_intercept.c:566
+#: src/exec_intercept.c:682 src/exec_intercept.c:806 src/exec_iolog.c:124
+#: src/exec_iolog.c:135 src/exec_iolog.c:212 src/exec_monitor.c:458
+#: src/exec_monitor.c:464 src/exec_monitor.c:472 src/exec_monitor.c:480
+#: src/exec_monitor.c:487 src/exec_monitor.c:494 src/exec_monitor.c:501
+#: src/exec_monitor.c:508 src/exec_monitor.c:515 src/exec_monitor.c:522
+#: src/exec_monitor.c:529 src/exec_nopty.c:227 src/exec_nopty.c:236
+#: src/exec_nopty.c:243 src/exec_nopty.c:250 src/exec_nopty.c:257
+#: src/exec_nopty.c:264 src/exec_nopty.c:271 src/exec_nopty.c:278
+#: src/exec_nopty.c:285 src/exec_nopty.c:292 src/exec_nopty.c:299
+#: src/exec_nopty.c:306 src/exec_nopty.c:314 src/exec_nopty.c:322
+#: src/exec_preload.c:341 src/exec_ptrace.c:474 src/exec_ptrace.c:767
+#: src/exec_ptrace.c:982 src/exec_ptrace.c:1638 src/exec_pty.c:506
+#: src/exec_pty.c:873 src/exec_pty.c:882 src/exec_pty.c:889 src/exec_pty.c:896
+#: src/exec_pty.c:903 src/exec_pty.c:910 src/exec_pty.c:917 src/exec_pty.c:924
+#: src/exec_pty.c:931 src/exec_pty.c:938 src/exec_pty.c:945 src/exec_pty.c:953
+#: src/load_plugins.c:157 src/load_plugins.c:182 src/load_plugins.c:218
+#: src/load_plugins.c:451 src/load_plugins.c:457 src/parse_args.c:172
+#: src/parse_args.c:194 src/parse_args.c:267 src/parse_args.c:623
+#: src/parse_args.c:645 src/parse_args.c:670 src/preserve_fds.c:46
+#: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
+#: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:471
+#: src/sudo.c:230 src/sudo.c:639 src/sudo.c:884 src/sudo.c:1112 src/sudo.c:1133
+#: src/sudo.c:1426 src/sudo.c:1595 src/sudo.c:1822 src/sudo.c:2156
+#: src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:429
+#: src/sudo_edit.c:438 src/sudo_edit.c:538 src/sudo_edit.c:545
+#: src/sudo_edit.c:673 src/sudo_edit.c:693 src/sudo_intercept_common.c:115
+#: src/sudo_intercept_common.c:340
 msgid "unable to allocate memory"
 msgstr ""
 
@@ -113,23 +112,23 @@ msgstr ""
 msgid "%.*s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/util/mkdir_parents.c:102 lib/util/sudo_conf.c:704 src/selinux.c:235
-#: src/selinux.c:265 src/sudo.c:371 src/sudo_edit.c:494 src/sudo_edit.c:559
+#: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:677
+#: lib/util/sudo_conf.c:689 lib/util/sudo_conf.c:715 src/selinux.c:235
+#: src/selinux.c:265 src/sudo.c:371 src/sudo_edit.c:494 src/sudo_edit.c:557
 #, c-format
 msgid "unable to open %s"
 msgstr ""
 
-#: lib/util/mkdir_parents.c:119 lib/util/mkdir_parents.c:127
-#: lib/util/mkdir_parents.c:136
-#, c-format
-msgid "unable to open %.*s"
-msgstr ""
-
-#: lib/util/mkdir_parents.c:157
+#: lib/util/mkdir_parents.c:120 lib/util/mkdir_parents.c:160
 #, c-format
 msgid "unable to mkdir %.*s"
 msgstr ""
 
+#: lib/util/mkdir_parents.c:130 lib/util/mkdir_parents.c:139
+#, c-format
+msgid "unable to open %.*s"
+msgstr ""
+
 #: lib/util/regex.c:103
 msgid "regular expression too large"
 msgstr ""
@@ -138,8 +137,8 @@ msgstr ""
 msgid "Unknown signal"
 msgstr ""
 
-#: lib/util/strtoid.c:87 lib/util/strtomode.c:52 lib/util/strtonum.c:148
-#: lib/util/strtonum.c:187 src/sesh.c:146 src/sesh.c:159
+#: lib/util/strtoid.c:84 lib/util/strtomode.c:52 lib/util/strtonum.c:148
+#: lib/util/strtonum.c:187 src/sesh.c:240 src/sesh.c:253
 msgid "invalid value"
 msgstr ""
 
@@ -151,86 +150,86 @@ msgstr ""
 msgid "value too small"
 msgstr ""
 
-#: lib/util/sudo_conf.c:237
+#: lib/util/sudo_conf.c:238
 #, c-format
 msgid "invalid Path value \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:403 lib/util/sudo_conf.c:419 lib/util/sudo_conf.c:472
+#: lib/util/sudo_conf.c:404 lib/util/sudo_conf.c:420 lib/util/sudo_conf.c:473
 #, c-format
 msgid "invalid value for %s \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:440
+#: lib/util/sudo_conf.c:441
 #, c-format
 msgid "unsupported group source \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:456
+#: lib/util/sudo_conf.c:457
 #, c-format
 msgid "invalid max groups \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:681 src/copy_file.c:150
-#, c-format
-msgid "unable to stat %s"
-msgstr ""
-
-#: lib/util/sudo_conf.c:684
+#: lib/util/sudo_conf.c:692
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: lib/util/sudo_conf.c:687 src/copy_file.c:163
+#: lib/util/sudo_conf.c:695 src/copy_file.c:164
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:691
+#: lib/util/sudo_conf.c:699
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: lib/util/sudo_conf.c:694
+#: lib/util/sudo_conf.c:702
 #, c-format
 msgid "%s is group writable"
 msgstr ""
 
-#: src/apparmor.c:79
+#: src/apparmor.c:85
 msgid "failed to determine AppArmor confinement"
 msgstr ""
 
-#: src/apparmor.c:87
+#: src/apparmor.c:93
 #, c-format
 msgid "unable to change AppArmor profile to %s"
 msgstr ""
 
-#: src/copy_file.c:93
+#: src/copy_file.c:94
 #, c-format
 msgid "%s: truncate %s to zero bytes? (y/n) [n] "
 msgstr ""
 
-#: src/copy_file.c:97
+#: src/copy_file.c:98
 #, c-format
 msgid "not overwriting %s"
 msgstr ""
 
-#: src/copy_file.c:119
+#: src/copy_file.c:120
 #, c-format
 msgid "unable to read from %s"
 msgstr ""
 
-#: src/copy_file.c:136 src/sudo_edit.c:320
+#: src/copy_file.c:137 src/sudo_edit.c:320
 #, c-format
 msgid "unable to write to %s"
 msgstr ""
 
-#: src/copy_file.c:154 src/sesh.c:218 src/sudo_edit.c:197
+#: src/copy_file.c:151
+#, c-format
+msgid "unable to stat %s"
+msgstr ""
+
+#: src/copy_file.c:155 src/sesh.c:312 src/sudo_edit.c:197
 #, c-format
 msgid "%s: not a regular file"
 msgstr ""
 
-#: src/copy_file.c:158
+#: src/copy_file.c:159
 #, c-format
 msgid "%s: bad file mode: 0%o"
 msgstr ""
@@ -239,60 +238,59 @@ msgstr ""
 msgid "unable to restore current working directory"
 msgstr ""
 
-#: src/exec.c:103
+#: src/exec.c:111
 msgid "unable to set privileges"
 msgstr ""
 
-#: src/exec.c:109 src/exec.c:114
+#: src/exec.c:117 src/exec.c:122
 msgid "unable to set limit privileges"
 msgstr ""
 
-#: src/exec.c:137
+#: src/exec.c:145
 #, c-format
 msgid "unknown login class %s"
 msgstr ""
 
-#: src/exec.c:149
+#: src/exec.c:157
 msgid "unable to set user context"
 msgstr ""
 
-#: src/exec.c:165
+#: src/exec.c:173
 msgid "unable to set process priority"
 msgstr ""
 
-#: src/exec.c:182
+#: src/exec.c:190
 #, c-format
 msgid "unable to change root to %s"
 msgstr ""
 
-#: src/exec.c:195 src/exec.c:201 src/exec.c:208
+#: src/exec.c:203 src/exec.c:209 src/exec.c:216
 #, c-format
 msgid "unable to change to runas uid (%u, %u)"
 msgstr ""
 
-#: src/exec.c:226
+#: src/exec.c:238 src/sesh.c:199
 #, c-format
 msgid "unable to change directory to %s"
 msgstr ""
 
-#: src/exec.c:230
+#: src/exec.c:243
 #, c-format
 msgid "starting from %s"
 msgstr ""
 
-#: src/exec.c:312 src/exec_monitor.c:575 src/exec_monitor.c:577
-#: src/exec_monitor.c:648 src/exec_nopty.c:439 src/exec_pty.c:586
-#: src/exec_pty.c:1447 src/exec_pty.c:1449 src/signal.c:144 src/signal.c:151
-#: src/signal.c:165 src/suspend_nopty.c:89
+#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:567 src/exec_monitor.c:569
+#: src/exec_pty.c:225 src/exec_pty.c:1017 src/exec_pty.c:1019 src/signal.c:144
+#: src/signal.c:151 src/signal.c:165 src/suspend_nopty.c:93
 #, c-format
 msgid "unable to set handler for signal %d"
 msgstr ""
 
-#: src/exec.c:391
+#: src/exec.c:422
 msgid "intercept mode is not supported with SELinux RBAC on this system"
 msgstr ""
 
-#: src/exec.c:396
+#: src/exec.c:427
 msgid "unable to log sub-commands with SELinux RBAC on this system"
 msgstr ""
 
@@ -300,58 +298,84 @@ msgstr ""
 msgid "unable to remove PRIV_PROC_EXEC from PRIV_LIMIT"
 msgstr ""
 
-#: src/exec_intercept.c:95 src/exec_intercept.c:674 src/exec_intercept.c:864
-#: src/exec_intercept.c:876 src/exec_monitor.c:466 src/exec_monitor.c:474
-#: src/exec_monitor.c:482 src/exec_monitor.c:489 src/exec_monitor.c:496
-#: src/exec_monitor.c:503 src/exec_monitor.c:510 src/exec_monitor.c:517
-#: src/exec_monitor.c:524 src/exec_monitor.c:531 src/exec_nopty.c:226
-#: src/exec_nopty.c:235 src/exec_nopty.c:242 src/exec_nopty.c:249
-#: src/exec_nopty.c:256 src/exec_nopty.c:263 src/exec_nopty.c:270
-#: src/exec_nopty.c:277 src/exec_nopty.c:284 src/exec_nopty.c:291
-#: src/exec_nopty.c:298 src/exec_nopty.c:305 src/exec_nopty.c:313
-#: src/exec_pty.c:711 src/exec_pty.c:716 src/exec_pty.c:813 src/exec_pty.c:820
-#: src/exec_pty.c:917 src/exec_pty.c:1267 src/exec_pty.c:1276
-#: src/exec_pty.c:1283 src/exec_pty.c:1290 src/exec_pty.c:1297
-#: src/exec_pty.c:1304 src/exec_pty.c:1311 src/exec_pty.c:1318
-#: src/exec_pty.c:1325 src/exec_pty.c:1332 src/exec_pty.c:1339
-#: src/exec_pty.c:1764 src/exec_pty.c:1774 src/exec_pty.c:1819
-#: src/exec_pty.c:1826 src/exec_pty.c:1853
+#: src/exec_intercept.c:70 src/exec_iolog.c:165 src/exec_iolog.c:175
+#: src/exec_iolog.c:220 src/exec_iolog.c:227 src/exec_iolog.c:254
+#: src/exec_monitor.c:466 src/exec_monitor.c:474 src/exec_monitor.c:482
+#: src/exec_monitor.c:489 src/exec_monitor.c:496 src/exec_monitor.c:503
+#: src/exec_monitor.c:510 src/exec_monitor.c:517 src/exec_monitor.c:524
+#: src/exec_monitor.c:531 src/exec_nopty.c:229 src/exec_nopty.c:238
+#: src/exec_nopty.c:245 src/exec_nopty.c:252 src/exec_nopty.c:259
+#: src/exec_nopty.c:266 src/exec_nopty.c:273 src/exec_nopty.c:280
+#: src/exec_nopty.c:287 src/exec_nopty.c:294 src/exec_nopty.c:301
+#: src/exec_nopty.c:308 src/exec_nopty.c:316 src/exec_nopty.c:324
+#: src/exec_nopty.c:383 src/exec_nopty.c:449 src/exec_pty.c:355
+#: src/exec_pty.c:457 src/exec_pty.c:512 src/exec_pty.c:875 src/exec_pty.c:884
+#: src/exec_pty.c:891 src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912
+#: src/exec_pty.c:919 src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940
+#: src/exec_pty.c:947
 msgid "unable to add event to queue"
 msgstr ""
 
-#: src/exec_intercept.c:344 src/sudo.c:1226 src/sudo.c:1271 src/sudo.c:1315
+#: src/exec_intercept.c:317 src/sudo.c:1018
+msgid "command not set by the security policy"
+msgstr ""
+
+#: src/exec_intercept.c:393 src/exec_intercept.c:421 src/sudo.c:1238
+#: src/sudo.c:1283 src/sudo.c:1327
 msgid "command rejected by policy"
 msgstr ""
 
-#: src/exec_intercept.c:437 src/sudo.c:1231 src/sudo.c:1276 src/sudo.c:1320
-#: src/sudo.c:1394
+#: src/exec_intercept.c:491 src/sudo.c:1925
+msgid "approval plugin error"
+msgstr ""
+
+#: src/exec_intercept.c:508 src/sudo.c:1243 src/sudo.c:1288 src/sudo.c:1332
+#: src/sudo.c:1406
 msgid "policy plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:462
+#: src/exec_intercept.c:543
 msgid "invalid PolicyCheckRequest"
 msgstr ""
 
-#: src/exec_intercept.c:584
+#: src/exec_intercept.c:678
 #, c-format
 msgid "client request too large: %zu"
 msgstr ""
 
-#: src/exec_intercept.c:622
+#: src/exec_intercept.c:720
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: src/exec_intercept.c:665
+#: src/exec_intercept.c:768
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: src/exec_intercept.c:695
+#: src/exec_intercept.c:794
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
 
+#: src/exec_iolog.c:323 src/exec_iolog.c:363 src/exec_iolog.c:403
+#: src/exec_iolog.c:454 src/exec_iolog.c:505
+msgid "I/O plugin error"
+msgstr ""
+
+#: src/exec_iolog.c:327 src/exec_iolog.c:367 src/exec_iolog.c:407
+#: src/exec_iolog.c:458 src/exec_iolog.c:509
+msgid "command rejected by I/O plugin"
+msgstr ""
+
+#: src/exec_iolog.c:556
+msgid "error logging suspend"
+msgstr ""
+
+#: src/exec_iolog.c:591
+msgid "error changing window size"
+msgstr ""
+
 #: src/exec_monitor.c:360
 msgid "error reading from socketpair"
 msgstr ""
@@ -361,371 +385,360 @@ msgstr ""
 msgid "unexpected reply type on backchannel: %d"
 msgstr ""
 
-#: src/exec_monitor.c:593
+#: src/exec_monitor.c:585
 msgid "unable to set controlling tty"
 msgstr ""
 
-#: src/exec_monitor.c:601 src/exec_nopty.c:382 src/exec_pty.c:1526
-#: src/exec_pty.c:1547 src/exec_pty.c:1567 src/tgetpass.c:305
+#: src/exec_monitor.c:593 src/exec_nopty.c:494 src/exec_nopty.c:504
+#: src/exec_nopty.c:514 src/exec_nopty.c:548 src/exec_pty.c:1088
+#: src/exec_pty.c:1109 src/exec_pty.c:1129 src/tgetpass.c:305
 msgid "unable to create pipe"
 msgstr ""
 
-#: src/exec_monitor.c:611
+#: src/exec_monitor.c:603
 msgid "unable to receive message from parent"
 msgstr ""
 
-#: src/exec_monitor.c:627 src/exec_nopty.c:422 src/exec_pty.c:1605
+#: src/exec_monitor.c:619 src/exec_nopty.c:591 src/exec_pty.c:1167
 #: src/sudo_edit.c:361 src/tgetpass.c:309
 msgid "unable to fork"
 msgstr ""
 
-#: src/exec_monitor.c:631 src/exec_monitor.c:749 src/exec_nopty.c:518
+#: src/exec_monitor.c:623 src/exec_monitor.c:721 src/exec_nopty.c:696
 msgid "unable to restore tty label"
 msgstr ""
 
-#: src/exec_monitor.c:664 src/sesh.c:123 src/sudo.c:1177
+#: src/exec_monitor.c:636 src/sesh.c:217 src/sudo.c:1189
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: src/exec_nopty.c:376 src/exec_pty.c:1456
+#: src/exec_nopty.c:542 src/exec_pty.c:1026
 msgid "policy plugin failed session initialization"
 msgstr ""
 
-#: src/exec_nopty.c:391 src/exec_pty.c:1425 src/exec_pty.c:1434
+#: src/exec_nopty.c:557 src/exec_pty.c:995 src/exec_pty.c:1004
 msgid "unable to create sockets"
 msgstr ""
 
-#: src/exec_nopty.c:506 src/exec_pty.c:1703
+#: src/exec_nopty.c:684 src/exec_pty.c:1265
 msgid "error in event loop"
 msgstr ""
 
-#: src/exec_ptrace.c:647
-msgid "insufficient space for execve arguments"
-msgstr ""
-
-#: src/exec_ptrace.c:658 src/exec_ptrace.c:668 src/exec_ptrace.c:678
-#, c-format
-msgid "unable to read execve %s for process %d"
-msgstr ""
-
-#: src/exec_ptrace.c:714 src/exec_ptrace.c:739 src/exec_ptrace.c:1194
-#, c-format
-msgid "unable to set registers for process %d"
-msgstr ""
-
-#: src/exec_ptrace.c:734 src/exec_ptrace.c:899
-#, c-format
-msgid "process %d exited unexpectedly"
-msgstr ""
-
-#: src/exec_ptrace.c:843
-msgid "unable to set seccomp filter"
-msgstr ""
-
-#: src/exec_ptrace.c:934
-#, c-format
-msgid "pathname mismatch, expected \"%s\", got \"%s\""
-msgstr ""
-
-#: src/exec_ptrace.c:942 src/exec_ptrace.c:948 src/exec_ptrace.c:954
-#: src/exec_ptrace.c:962 src/exec_ptrace.c:968 src/exec_ptrace.c:974
-#, c-format
-msgid "%s[%d] mismatch, expected \"%s\", got \"%s\""
-msgstr ""
-
-#: src/exec_ptrace.c:1013
-#, c-format
-msgid "unable to get event message for process %d"
-msgstr ""
-
-#: src/exec_ptrace.c:1019
-#, c-format
-msgid "unable to get registers for process %d"
-msgstr ""
-
-#: src/exec_pty.c:163
-msgid "unable to allocate pty"
-msgstr ""
-
-#: src/exec_pty.c:227 src/exec_pty.c:267 src/exec_pty.c:307 src/exec_pty.c:358
-#: src/exec_pty.c:409
-msgid "I/O plugin error"
-msgstr ""
-
-#: src/exec_pty.c:231 src/exec_pty.c:271 src/exec_pty.c:311 src/exec_pty.c:362
-#: src/exec_pty.c:413
-msgid "command rejected by I/O plugin"
-msgstr ""
-
-#: src/exec_pty.c:460
-msgid "error logging suspend"
-msgstr ""
-
-#: src/exec_pty.c:494
-msgid "error changing window size"
-msgstr ""
-
-#: src/exec_pty.c:624 src/signal.c:101 src/suspend_nopty.c:95
-#, c-format
-msgid "unable to restore handler for signal %d"
-msgstr ""
-
-#: src/exec_pty.c:1651
-msgid "unable to send message to monitor process"
-msgstr ""
-
-#: src/load_plugins.c:108 src/load_plugins.c:122 src/load_plugins.c:128
-#: src/load_plugins.c:277 src/load_plugins.c:287 src/load_plugins.c:297
-#: src/load_plugins.c:344
-#, c-format
-msgid "error in %s, line %d while loading plugin \"%s\""
-msgstr ""
-
-#: src/load_plugins.c:124
-#, c-format
-msgid "%s must be owned by uid %d"
-msgstr ""
-
-#: src/load_plugins.c:130
-#, c-format
-msgid "%s must be only be writable by owner"
-msgstr ""
-
-#: src/load_plugins.c:241 src/load_plugins.c:312
-#, c-format
-msgid "ignoring duplicate plugin \"%s\" in %s, line %d"
-msgstr ""
-
-#: src/load_plugins.c:279
-#, c-format
-msgid "unable to load %s: %s"
-msgstr ""
-
-#: src/load_plugins.c:289
-#, c-format
-msgid "unable to find symbol \"%s\" in %s"
-msgstr ""
-
-#: src/load_plugins.c:299
-#, c-format
-msgid "incompatible plugin major version %d (expected %d) found in %s"
-msgstr ""
-
-#: src/load_plugins.c:317
-#, c-format
-msgid "ignoring policy plugin \"%s\" in %s, line %d"
-msgstr ""
-
-#: src/load_plugins.c:320
-msgid "only a single policy plugin may be specified"
-msgstr ""
-
-#: src/load_plugins.c:346
-#, c-format
-msgid "unknown plugin type %d found in %s"
-msgstr ""
-
-#: src/load_plugins.c:529
-#, c-format
-msgid "policy plugin %s does not include a check_policy method"
-msgstr ""
-
-#: src/net_ifs.c:210 src/net_ifs.c:376 src/net_ifs.c:437 src/net_ifs.c:624
-#: src/net_ifs.c:855 src/sudo.c:486 src/sudo_edit.c:398 src/sudo_edit.c:406
+#: src/exec_preload.c:165 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
+#: src/net_ifs.c:620 src/net_ifs.c:851 src/sudo.c:486 src/sudo_edit.c:398
+#: src/sudo_edit.c:406
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
-#: src/parse_args.c:211
+#: src/exec_ptrace.c:1078 src/exec_ptrace.c:1103 src/exec_ptrace.c:1909
+#, c-format
+msgid "unable to set registers for process %d"
+msgstr ""
+
+#: src/exec_ptrace.c:1098 src/exec_ptrace.c:1273 src/exec_ptrace.c:1615
+#, c-format
+msgid "process %d exited unexpectedly"
+msgstr ""
+
+#: src/exec_ptrace.c:1207
+msgid "unable to set seccomp filter"
+msgstr ""
+
+#: src/exec_ptrace.c:1404
+#, c-format
+msgid "interpreter argument , expected \"%s\", got \"%s\""
+msgstr ""
+
+#: src/exec_ptrace.c:1503
+#, c-format
+msgid "pathname mismatch, expected \"%s\", got \"%s\""
+msgstr ""
+
+#: src/exec_ptrace.c:1512 src/exec_ptrace.c:1519 src/exec_ptrace.c:1532
+#: src/exec_ptrace.c:1540 src/exec_ptrace.c:1546 src/exec_ptrace.c:1552
+#, c-format
+msgid "%s[%d] mismatch, expected \"%s\", got \"%s\""
+msgstr ""
+
+#: src/exec_ptrace.c:1619
+#, c-format
+msgid "process %d unexpected status 0x%x"
+msgstr ""
+
+#: src/exec_ptrace.c:1711
+#, c-format
+msgid "unable to get event message for process %d"
+msgstr ""
+
+#: src/exec_ptrace.c:1718
+#, c-format
+msgid "unable to get registers for process %d"
+msgstr ""
+
+#: src/exec_pty.c:103
+msgid "unable to allocate pty"
+msgstr ""
+
+#: src/exec_pty.c:263 src/signal.c:101 src/suspend_nopty.c:99
+#, c-format
+msgid "unable to restore handler for signal %d"
+msgstr ""
+
+#: src/exec_pty.c:1213
+msgid "unable to send message to monitor process"
+msgstr ""
+
+#: src/load_plugins.c:109 src/load_plugins.c:123 src/load_plugins.c:129
+#: src/load_plugins.c:279 src/load_plugins.c:289 src/load_plugins.c:299
+#: src/load_plugins.c:346
+#, c-format
+msgid "error in %s, line %d while loading plugin \"%s\""
+msgstr ""
+
+#: src/load_plugins.c:125
+#, c-format
+msgid "%s must be owned by uid %d"
+msgstr ""
+
+#: src/load_plugins.c:131
+#, c-format
+msgid "%s must be only be writable by owner"
+msgstr ""
+
+#: src/load_plugins.c:243 src/load_plugins.c:314
+#, c-format
+msgid "ignoring duplicate plugin \"%s\" in %s, line %d"
+msgstr ""
+
+#: src/load_plugins.c:281
+#, c-format
+msgid "unable to load %s: %s"
+msgstr ""
+
+#: src/load_plugins.c:291
+#, c-format
+msgid "unable to find symbol \"%s\" in %s"
+msgstr ""
+
+#: src/load_plugins.c:301
+#, c-format
+msgid "incompatible plugin major version %d (expected %d) found in %s"
+msgstr ""
+
+#: src/load_plugins.c:319
+#, c-format
+msgid "ignoring policy plugin \"%s\" in %s, line %d"
+msgstr ""
+
+#: src/load_plugins.c:322
+msgid "only a single policy plugin may be specified"
+msgstr ""
+
+#: src/load_plugins.c:348
+#, c-format
+msgid "unknown plugin type %d found in %s"
+msgstr ""
+
+#: src/load_plugins.c:531
+#, c-format
+msgid "policy plugin %s does not include a check_policy method"
+msgstr ""
+
+#: src/parse_args.c:214
 #, c-format
 msgid "invalid environment variable name: %s"
 msgstr ""
 
-#: src/parse_args.c:314
+#: src/parse_args.c:317
 msgid "the argument to -C must be a number greater than or equal to 3"
 msgstr ""
 
-#: src/parse_args.c:545
+#: src/parse_args.c:554
 msgid "you may not specify both the -i and -s options"
 msgstr ""
 
-#: src/parse_args.c:550
+#: src/parse_args.c:559
 msgid "you may not specify both the -i and -E options"
 msgstr ""
 
-#: src/parse_args.c:560
+#: src/parse_args.c:569
 msgid "the -E option is not valid in edit mode"
 msgstr ""
 
-#: src/parse_args.c:563
+#: src/parse_args.c:572
 msgid "you may not specify environment variables in edit mode"
 msgstr ""
 
-#: src/parse_args.c:573
+#: src/parse_args.c:582
 msgid "the -U option may only be used with the -l option"
 msgstr ""
 
-#: src/parse_args.c:577
+#: src/parse_args.c:586
 msgid "the -A and -S options may not be used together"
 msgstr ""
 
-#: src/parse_args.c:674
+#: src/parse_args.c:684
 msgid "sudoedit is not supported on this platform"
 msgstr ""
 
-#: src/parse_args.c:757
+#: src/parse_args.c:767
 msgid ""
 "Only one of the -e, -h, -i, -K, -l, -s, -v or -V options may be specified"
 msgstr ""
 
-#: src/parse_args.c:773
+#: src/parse_args.c:780
+msgid "Only one of the -K, -k or -N options may be specified"
+msgstr ""
+
+#: src/parse_args.c:796
 #, c-format
 msgid ""
 "%s - edit files as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:775
+#: src/parse_args.c:798
 #, c-format
 msgid ""
 "%s - execute a command as another user\n"
 "\n"
 msgstr ""
 
-#: src/parse_args.c:781
+#: src/parse_args.c:804
 msgid ""
 "\n"
 "Options:\n"
 msgstr ""
 
-#: src/parse_args.c:783
+#: src/parse_args.c:806
 msgid "use a helper program for password prompting"
 msgstr ""
 
-#: src/parse_args.c:786
+#: src/parse_args.c:809
 msgid "use specified BSD authentication type"
 msgstr ""
 
-#: src/parse_args.c:790
+#: src/parse_args.c:813
 msgid "run command in the background"
 msgstr ""
 
-#: src/parse_args.c:793
+#: src/parse_args.c:816
 msgid "ring bell when prompting"
 msgstr ""
 
-#: src/parse_args.c:795
+#: src/parse_args.c:818
 msgid "close all file descriptors >= num"
 msgstr ""
 
-#: src/parse_args.c:798
+#: src/parse_args.c:821
 msgid "run command with the specified BSD login class"
 msgstr ""
 
-#: src/parse_args.c:801
+#: src/parse_args.c:824
 msgid "change the working directory before running command"
 msgstr ""
 
-#: src/parse_args.c:804
+#: src/parse_args.c:827
 msgid "preserve user environment when running command"
 msgstr ""
 
-#: src/parse_args.c:806
+#: src/parse_args.c:829
 msgid "preserve specific environment variables"
 msgstr ""
 
-#: src/parse_args.c:808
+#: src/parse_args.c:831
 msgid "edit files instead of running a command"
 msgstr ""
 
-#: src/parse_args.c:811
+#: src/parse_args.c:834
 msgid "run command as the specified group name or ID"
 msgstr ""
 
-#: src/parse_args.c:814
+#: src/parse_args.c:837
 msgid "set HOME variable to target user's home dir"
 msgstr ""
 
-#: src/parse_args.c:817
+#: src/parse_args.c:840
 msgid "display help message and exit"
 msgstr ""
 
-#: src/parse_args.c:819
+#: src/parse_args.c:842
 msgid "run command on host (if supported by plugin)"
 msgstr ""
 
-#: src/parse_args.c:822
+#: src/parse_args.c:845
 msgid "run login shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:824
+#: src/parse_args.c:847
 msgid "remove timestamp file completely"
 msgstr ""
 
-#: src/parse_args.c:827
+#: src/parse_args.c:850
 msgid "invalidate timestamp file"
 msgstr ""
 
-#: src/parse_args.c:830
+#: src/parse_args.c:853
 msgid ""
 "list user's privileges or check a specific command; use twice for longer "
 "format"
 msgstr ""
 
-#: src/parse_args.c:833
+#: src/parse_args.c:856
 msgid "non-interactive mode, no prompts are used"
 msgstr ""
 
-#: src/parse_args.c:836
+#: src/parse_args.c:859
 msgid "preserve group vector instead of setting to target's"
 msgstr ""
 
-#: src/parse_args.c:839
+#: src/parse_args.c:862
 msgid "use the specified password prompt"
 msgstr ""
 
-#: src/parse_args.c:841
+#: src/parse_args.c:864
 msgid "change the root directory before running command"
 msgstr ""
 
-#: src/parse_args.c:844
+#: src/parse_args.c:867
 msgid "create SELinux security context with specified role"
 msgstr ""
 
-#: src/parse_args.c:847
+#: src/parse_args.c:870
 msgid "read password from standard input"
 msgstr ""
 
-#: src/parse_args.c:850
+#: src/parse_args.c:873
 msgid "run shell as the target user; a command may also be specified"
 msgstr ""
 
-#: src/parse_args.c:854
+#: src/parse_args.c:877
 msgid "create SELinux security context with specified type"
 msgstr ""
 
-#: src/parse_args.c:857
+#: src/parse_args.c:880
 msgid "terminate command after the specified time limit"
 msgstr ""
 
-#: src/parse_args.c:860
+#: src/parse_args.c:883
 msgid "in list mode, display privileges for user"
 msgstr ""
 
-#: src/parse_args.c:863
+#: src/parse_args.c:886
 msgid "run command (or edit file) as specified user name or ID"
 msgstr ""
 
-#: src/parse_args.c:865
+#: src/parse_args.c:888
 msgid "display version information and exit"
 msgstr ""
 
-#: src/parse_args.c:868
+#: src/parse_args.c:891
 msgid "update user's timestamp without running a command"
 msgstr ""
 
-#: src/parse_args.c:871
+#: src/parse_args.c:894
 msgid "stop processing command line arguments"
 msgstr ""
 
@@ -825,37 +838,42 @@ msgstr ""
 msgid "unable to set key creation context to %s"
 msgstr ""
 
-#: src/sesh.c:72
-msgid "requires at least one argument"
+#: src/sesh.c:114 src/sesh.c:134
+msgid "Only one of the -c or -i options may be specified"
 msgstr ""
 
-#: src/sesh.c:104
+#: src/sesh.c:129
 #, c-format
 msgid "invalid file descriptor number: %s"
 msgstr ""
 
-#: src/sesh.c:118
+#: src/sesh.c:167 src/sesh.c:171 src/sesh.c:175
 #, c-format
-msgid "unable to run %s as a login shell"
+msgid "The -%c option may not be used in edit mode."
 msgstr ""
 
-#: src/sesh.c:200 src/sesh.c:300 src/sudo_edit.c:204
+#: src/sesh.c:184 src/sesh.c:189
+#, c-format
+msgid "The -%c option may only be used in edit mode."
+msgstr ""
+
+#: src/sesh.c:294 src/sesh.c:394 src/sudo_edit.c:204
 #, c-format
 msgid "%s: editing symbolic links is not permitted"
 msgstr ""
 
-#: src/sesh.c:203 src/sesh.c:303 src/sudo_edit.c:207
+#: src/sesh.c:297 src/sesh.c:397 src/sudo_edit.c:207
 #, c-format
 msgid "%s: editing files in a writable directory is not permitted"
 msgstr ""
 
-#: src/sesh.c:287 src/sesh.c:308 src/sesh.c:317 src/sesh.c:325
+#: src/sesh.c:381 src/sesh.c:402 src/sesh.c:411 src/sesh.c:419
 #: src/sudo_edit.c:331
 #, c-format
 msgid "contents of edit session left in %s"
 msgstr ""
 
-#: src/sesh.c:416 src/sudo_edit.c:94
+#: src/sesh.c:476 src/sudo_edit.c:94
 msgid "unable to get group list"
 msgstr ""
 
@@ -939,124 +957,128 @@ msgstr ""
 msgid "unable to determine tty"
 msgstr ""
 
-#: src/sudo.c:925
+#: src/sudo.c:918
 msgid ""
 "The \"no new privileges\" flag is set, which prevents sudo from running as "
 "root."
 msgstr ""
 
-#: src/sudo.c:927
+#: src/sudo.c:920
 msgid ""
 "If sudo is running in a container, you may need to adjust the container "
 "configuration to disable the flag."
 msgstr ""
 
-#: src/sudo.c:961
+#: src/sudo.c:954
 #, c-format
 msgid "%s must be owned by uid %d and have the setuid bit set"
 msgstr ""
 
-#: src/sudo.c:964
+#: src/sudo.c:957
 #, c-format
 msgid ""
 "effective uid is not %d, is %s on a file system with the 'nosuid' option set "
 "or an NFS file system without root privileges?"
 msgstr ""
 
-#: src/sudo.c:970
+#: src/sudo.c:963
 #, c-format
 msgid "effective uid is not %d, is sudo installed setuid root?"
 msgstr ""
 
-#: src/sudo.c:986 src/tgetpass.c:331
+#: src/sudo.c:979 src/tgetpass.c:331
 msgid "unable to set supplementary group IDs"
 msgstr ""
 
-#: src/sudo.c:993
+#: src/sudo.c:986
 #, c-format
 msgid "unable to set effective gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:999
+#: src/sudo.c:992
 #, c-format
 msgid "unable to set gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1042
+#: src/sudo.c:1022
+msgid "argv not set by the security policy"
+msgstr ""
+
+#: src/sudo.c:1026
+msgid "envp not set by the security policy"
+msgstr ""
+
+#: src/sudo.c:1048
 #, c-format
 msgid "unexpected child termination condition: %d"
 msgstr ""
 
-#: src/sudo.c:1149
+#: src/sudo.c:1161
 msgid "unable to initialize policy plugin"
 msgstr ""
 
-#: src/sudo.c:1211
+#: src/sudo.c:1223
 #, c-format
 msgid "policy plugin %s is missing the \"check_policy\" method"
 msgstr ""
 
-#: src/sudo.c:1257
+#: src/sudo.c:1269
 #, c-format
 msgid "policy plugin %s does not support listing privileges"
 msgstr ""
 
-#: src/sudo.c:1301
+#: src/sudo.c:1313
 #, c-format
 msgid "policy plugin %s does not support the -v option"
 msgstr ""
 
-#: src/sudo.c:1339
+#: src/sudo.c:1351
 #, c-format
 msgid "policy plugin %s does not support the -k/-K options"
 msgstr ""
 
-#: src/sudo.c:1468
+#: src/sudo.c:1480
 #, c-format
 msgid "error initializing I/O plugin %s"
 msgstr ""
 
-#: src/sudo.c:1471
+#: src/sudo.c:1483
 msgid "error initializing I/O plugin"
 msgstr ""
 
-#: src/sudo.c:1620
+#: src/sudo.c:1632
 #, c-format
 msgid "error initializing audit plugin %s"
 msgstr ""
 
-#: src/sudo.c:1699
+#: src/sudo.c:1711
 #, c-format
 msgid "%s: unable to log error event%s%s"
 msgstr ""
 
-#: src/sudo.c:1735
+#: src/sudo.c:1747
 #, c-format
 msgid "%s: unable to log accept event%s%s"
 msgstr ""
 
-#: src/sudo.c:1740 src/sudo.c:1778
+#: src/sudo.c:1752 src/sudo.c:1790
 msgid "audit plugin error"
 msgstr ""
 
-#: src/sudo.c:1773
+#: src/sudo.c:1785
 #, c-format
 msgid "%s: unable to log reject event%s%s"
 msgstr ""
 
-#: src/sudo.c:1833
+#: src/sudo.c:1845
 #, c-format
 msgid "error initializing approval plugin %s"
 msgstr ""
 
-#: src/sudo.c:1903
+#: src/sudo.c:1915
 msgid "command rejected by approver"
 msgstr ""
 
-#: src/sudo.c:1913
-msgid "approval plugin error"
-msgstr ""
-
 #: src/sudo_edit.c:113
 msgid "no writable temporary directory found"
 msgstr ""
@@ -1066,7 +1088,7 @@ msgstr ""
 msgid "%s left unmodified"
 msgstr ""
 
-#: src/sudo_edit.c:304 src/sudo_edit.c:571
+#: src/sudo_edit.c:304 src/sudo_edit.c:569
 #, c-format
 msgid "%s unchanged"
 msgstr ""
@@ -1079,38 +1101,38 @@ msgstr ""
 msgid "sesh: unable to create temporary files"
 msgstr ""
 
-#: src/sudo_edit.c:485 src/sudo_edit.c:609
+#: src/sudo_edit.c:485 src/sudo_edit.c:604
 msgid "sesh: killed by a signal"
 msgstr ""
 
-#: src/sudo_edit.c:487 src/sudo_edit.c:612
+#: src/sudo_edit.c:487 src/sudo_edit.c:607
 #, c-format
 msgid "sesh: unknown error %d"
 msgstr ""
 
-#: src/sudo_edit.c:602
+#: src/sudo_edit.c:597
 msgid "unable to copy temporary files back to their original location"
 msgstr ""
 
-#: src/sudo_edit.c:606
+#: src/sudo_edit.c:601
 msgid ""
 "unable to copy some of the temporary files back to their original location"
 msgstr ""
 
-#: src/sudo_edit.c:649
+#: src/sudo_edit.c:645
 #, c-format
 msgid "unable to change uid to root (%u)"
 msgstr ""
 
-#: src/sudo_edit.c:670
+#: src/sudo_edit.c:666
 msgid "plugin error: missing file list for sudoedit"
 msgstr ""
 
-#: src/sudo_edit.c:713 src/sudo_edit.c:727
+#: src/sudo_edit.c:709 src/sudo_edit.c:723
 msgid "unable to read the clock"
 msgstr ""
 
-#: src/sudo_intercept_common.c:341
+#: src/sudo_intercept_common.c:365
 msgid "intercept port not set"
 msgstr ""