diff --git a/plugins/sudoers/po/sudoers.pot b/plugins/sudoers/po/sudoers.pot
index 964702913..1b28d2ec6 100644
--- a/plugins/sudoers/po/sudoers.pot
+++ b/plugins/sudoers/po/sudoers.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.12\n"
+"Project-Id-Version: sudo 1.9.13\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2022-10-10 09:13-0600\n"
+"POT-Creation-Date: 2023-01-24 13:11-0700\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
 
-#: confstr.sh:1 gram.y:1220 plugins/sudoers/logging.c:862
+#: confstr.sh:1 gram.y:1220 plugins/sudoers/logging.c:866
 msgid "syntax error"
 msgstr ""
 
@@ -47,28 +47,28 @@ msgstr ""
 #: gram.y:750 gram.y:762 gram.y:781 gram.y:944 gram.y:949 gram.y:957 gram.y:971
 #: gram.y:977 gram.y:1099 gram.y:1108 gram.y:1116 gram.y:1125 gram.y:1134
 #: gram.y:1163 gram.y:1172 gram.y:1180 gram.y:1280 gram.y:1410 gram.y:1777
-#: gram.y:1827 lib/eventlog/eventlog.c:309 lib/eventlog/eventlog.c:382
-#: lib/eventlog/eventlog.c:827 lib/eventlog/eventlog.c:904
-#: lib/eventlog/eventlog.c:1204 lib/iolog/iolog_filter.c:142
+#: gram.y:1827 lib/eventlog/eventlog.c:235 lib/eventlog/eventlog.c:312
+#: lib/eventlog/eventlog.c:757 lib/eventlog/eventlog.c:834
+#: lib/eventlog/eventlog.c:1135 lib/iolog/iolog_filter.c:142
 #: lib/iolog/iolog_filter.c:202 lib/iolog/iolog_filter.c:233
 #: lib/iolog/iolog_json.c:150 lib/iolog/iolog_json.c:382
-#: lib/iolog/iolog_json.c:412 lib/iolog/iolog_json.c:555
-#: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
-#: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
-#: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
-#: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
-#: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
-#: logsrvd/iolog_writer.c:182 logsrvd/iolog_writer.c:215
-#: logsrvd/iolog_writer.c:225 logsrvd/iolog_writer.c:254
-#: logsrvd/iolog_writer.c:275 logsrvd/iolog_writer.c:287
-#: logsrvd/iolog_writer.c:297 logsrvd/iolog_writer.c:307
-#: logsrvd/iolog_writer.c:317 logsrvd/iolog_writer.c:329
-#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
-#: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
-#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301
-#: logsrvd/logsrvd.c:310 logsrvd/logsrvd.c:1050 logsrvd/logsrvd.c:1113
-#: logsrvd/logsrvd.c:1582 logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771
-#: logsrvd/logsrvd.c:1988 logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
+#: lib/iolog/iolog_json.c:412 lib/iolog/iolog_legacy.c:100
+#: lib/iolog/iolog_legacy.c:111 lib/iolog/iolog_legacy.c:123
+#: lib/iolog/iolog_legacy.c:133 lib/iolog/iolog_legacy.c:139
+#: lib/iolog/iolog_loginfo.c:76 lib/iolog/iolog_loginfo.c:212
+#: logsrvd/iolog_writer.c:95 logsrvd/iolog_writer.c:100
+#: logsrvd/iolog_writer.c:134 logsrvd/iolog_writer.c:182
+#: logsrvd/iolog_writer.c:215 logsrvd/iolog_writer.c:225
+#: logsrvd/iolog_writer.c:254 logsrvd/iolog_writer.c:275
+#: logsrvd/iolog_writer.c:287 logsrvd/iolog_writer.c:297
+#: logsrvd/iolog_writer.c:307 logsrvd/iolog_writer.c:317
+#: logsrvd/iolog_writer.c:329 logsrvd/iolog_writer.c:364
+#: logsrvd/iolog_writer.c:370 logsrvd/iolog_writer.c:377
+#: logsrvd/iolog_writer.c:383 logsrvd/iolog_writer.c:567
+#: logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301 logsrvd/logsrvd.c:310
+#: logsrvd/logsrvd.c:1050 logsrvd/logsrvd.c:1113 logsrvd/logsrvd.c:1582
+#: logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771 logsrvd/logsrvd.c:1988
+#: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
 #: logsrvd/logsrvd_conf.c:626 logsrvd/logsrvd_conf.c:650
@@ -80,9 +80,9 @@ msgstr ""
 #: logsrvd/logsrvd_conf.c:1595 logsrvd/logsrvd_conf.c:1621
 #: logsrvd/logsrvd_conf.c:1633 logsrvd/logsrvd_conf.c:1640
 #: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1743
-#: logsrvd/logsrvd_journal.c:75 logsrvd/logsrvd_journal.c:213
-#: logsrvd/logsrvd_journal.c:214 logsrvd/logsrvd_journal.c:270
-#: logsrvd/logsrvd_journal.c:430 logsrvd/logsrvd_journal.c:432
+#: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:216
+#: logsrvd/logsrvd_journal.c:217 logsrvd/logsrvd_journal.c:273
+#: logsrvd/logsrvd_journal.c:433 logsrvd/logsrvd_journal.c:435
 #: logsrvd/logsrvd_local.c:215 logsrvd/logsrvd_local.c:216
 #: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:279
 #: logsrvd/logsrvd_local.c:417 logsrvd/logsrvd_local.c:466
@@ -123,67 +123,67 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:1158
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
 #: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
-#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:188
+#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:197
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
 #: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
-#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:228
+#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:212
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
 #: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
-#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:464
-#: plugins/sudoers/ldap.c:755 plugins/sudoers/ldap.c:919
-#: plugins/sudoers/ldap.c:1335 plugins/sudoers/ldap.c:1761
-#: plugins/sudoers/ldap.c:1798 plugins/sudoers/ldap.c:1879
-#: plugins/sudoers/ldap.c:2014 plugins/sudoers/ldap.c:2115
-#: plugins/sudoers/ldap.c:2131 plugins/sudoers/ldap_conf.c:218
-#: plugins/sudoers/ldap_conf.c:250 plugins/sudoers/ldap_conf.c:302
-#: plugins/sudoers/ldap_conf.c:338 plugins/sudoers/ldap_conf.c:444
-#: plugins/sudoers/ldap_conf.c:459 plugins/sudoers/ldap_conf.c:564
-#: plugins/sudoers/ldap_conf.c:597 plugins/sudoers/ldap_conf.c:689
-#: plugins/sudoers/ldap_conf.c:771 plugins/sudoers/ldap_util.c:294
-#: plugins/sudoers/ldap_util.c:301 plugins/sudoers/ldap_util.c:614
-#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:117
-#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:715
-#: plugins/sudoers/log_client.c:736 plugins/sudoers/log_client.c:1416
-#: plugins/sudoers/log_client.c:1537 plugins/sudoers/log_client.c:1637
-#: plugins/sudoers/log_client.c:1973 plugins/sudoers/log_client.c:2032
-#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:189
-#: plugins/sudoers/logging.c:453 plugins/sudoers/logging.c:668
-#: plugins/sudoers/logging.c:805 plugins/sudoers/match_command.c:335
-#: plugins/sudoers/match_command.c:603 plugins/sudoers/match_command.c:654
-#: plugins/sudoers/match_command.c:728 plugins/sudoers/match_command.c:776
-#: plugins/sudoers/match_digest.c:93 plugins/sudoers/parse.c:227
-#: plugins/sudoers/parse.c:244 plugins/sudoers/parse.c:263
-#: plugins/sudoers/parse.c:282 plugins/sudoers/parse.c:299
-#: plugins/sudoers/parse.c:322 plugins/sudoers/parse.c:333
-#: plugins/sudoers/parse_ldif.c:153 plugins/sudoers/parse_ldif.c:184
-#: plugins/sudoers/parse_ldif.c:253 plugins/sudoers/parse_ldif.c:261
-#: plugins/sudoers/parse_ldif.c:266 plugins/sudoers/parse_ldif.c:342
-#: plugins/sudoers/parse_ldif.c:353 plugins/sudoers/parse_ldif.c:380
-#: plugins/sudoers/parse_ldif.c:397 plugins/sudoers/parse_ldif.c:409
-#: plugins/sudoers/parse_ldif.c:413 plugins/sudoers/parse_ldif.c:427
-#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
-#: plugins/sudoers/parse_ldif.c:628 plugins/sudoers/parse_ldif.c:653
-#: plugins/sudoers/parse_ldif.c:711 plugins/sudoers/parse_ldif.c:728
-#: plugins/sudoers/parse_ldif.c:756 plugins/sudoers/parse_ldif.c:763
-#: plugins/sudoers/policy.c:624 plugins/sudoers/policy.c:1026
-#: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
-#: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
-#: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
-#: plugins/sudoers/pwutil.c:659 plugins/sudoers/pwutil.c:857
-#: plugins/sudoers/pwutil.c:913 plugins/sudoers/pwutil.c:957
-#: plugins/sudoers/pwutil.c:1014 plugins/sudoers/sssd.c:145
-#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
-#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
-#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:761
-#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:112
-#: plugins/sudoers/stubs.c:120 plugins/sudoers/sudoers.c:354
-#: plugins/sudoers/sudoers.c:380 plugins/sudoers/sudoers.c:448
-#: plugins/sudoers/sudoers.c:457 plugins/sudoers/sudoers.c:498
-#: plugins/sudoers/sudoers.c:827 plugins/sudoers/sudoers.c:877
-#: plugins/sudoers/sudoers.c:1015 plugins/sudoers/sudoers.c:1075
-#: plugins/sudoers/sudoers.c:1330 plugins/sudoers/sudoreplay.c:562
-#: plugins/sudoers/sudoreplay.c:565 plugins/sudoers/sudoreplay.c:1281
-#: plugins/sudoers/sudoreplay.c:1503 plugins/sudoers/sudoreplay.c:1507
+#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:466
+#: plugins/sudoers/ldap.c:757 plugins/sudoers/ldap.c:921
+#: plugins/sudoers/ldap.c:1337 plugins/sudoers/ldap.c:1763
+#: plugins/sudoers/ldap.c:1800 plugins/sudoers/ldap.c:2016
+#: plugins/sudoers/ldap.c:2117 plugins/sudoers/ldap.c:2133
+#: plugins/sudoers/ldap_conf.c:218 plugins/sudoers/ldap_conf.c:250
+#: plugins/sudoers/ldap_conf.c:302 plugins/sudoers/ldap_conf.c:338
+#: plugins/sudoers/ldap_conf.c:444 plugins/sudoers/ldap_conf.c:459
+#: plugins/sudoers/ldap_conf.c:564 plugins/sudoers/ldap_conf.c:597
+#: plugins/sudoers/ldap_conf.c:689 plugins/sudoers/ldap_conf.c:771
+#: plugins/sudoers/ldap_util.c:294 plugins/sudoers/ldap_util.c:301
+#: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
+#: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:402
+#: plugins/sudoers/log_client.c:715 plugins/sudoers/log_client.c:736
+#: plugins/sudoers/log_client.c:1415 plugins/sudoers/log_client.c:1536
+#: plugins/sudoers/log_client.c:1636 plugins/sudoers/log_client.c:1972
+#: plugins/sudoers/log_client.c:2031 plugins/sudoers/logging.c:110
+#: plugins/sudoers/logging.c:189 plugins/sudoers/logging.c:457
+#: plugins/sudoers/logging.c:672 plugins/sudoers/logging.c:809
+#: plugins/sudoers/match_command.c:335 plugins/sudoers/match_command.c:603
+#: plugins/sudoers/match_command.c:654 plugins/sudoers/match_command.c:728
+#: plugins/sudoers/match_command.c:776 plugins/sudoers/match_digest.c:93
+#: plugins/sudoers/parse.c:267 plugins/sudoers/parse.c:284
+#: plugins/sudoers/parse.c:303 plugins/sudoers/parse.c:322
+#: plugins/sudoers/parse.c:339 plugins/sudoers/parse.c:362
+#: plugins/sudoers/parse.c:373 plugins/sudoers/parse_ldif.c:153
+#: plugins/sudoers/parse_ldif.c:184 plugins/sudoers/parse_ldif.c:253
+#: plugins/sudoers/parse_ldif.c:261 plugins/sudoers/parse_ldif.c:266
+#: plugins/sudoers/parse_ldif.c:342 plugins/sudoers/parse_ldif.c:353
+#: plugins/sudoers/parse_ldif.c:380 plugins/sudoers/parse_ldif.c:397
+#: plugins/sudoers/parse_ldif.c:409 plugins/sudoers/parse_ldif.c:413
+#: plugins/sudoers/parse_ldif.c:427 plugins/sudoers/parse_ldif.c:484
+#: plugins/sudoers/parse_ldif.c:598 plugins/sudoers/parse_ldif.c:628
+#: plugins/sudoers/parse_ldif.c:653 plugins/sudoers/parse_ldif.c:711
+#: plugins/sudoers/parse_ldif.c:728 plugins/sudoers/parse_ldif.c:756
+#: plugins/sudoers/parse_ldif.c:763 plugins/sudoers/policy.c:626
+#: plugins/sudoers/policy.c:1033 plugins/sudoers/prompt.c:93
+#: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
+#: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
+#: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
+#: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:945
+#: plugins/sudoers/pwutil.c:993 plugins/sudoers/pwutil.c:1052
+#: plugins/sudoers/sssd.c:145 plugins/sudoers/sssd.c:185
+#: plugins/sudoers/sssd.c:414 plugins/sudoers/sssd.c:479
+#: plugins/sudoers/sssd.c:505 plugins/sudoers/sssd.c:568
+#: plugins/sudoers/sssd.c:761 plugins/sudoers/strvec_join.c:53
+#: plugins/sudoers/stubs.c:112 plugins/sudoers/stubs.c:120
+#: plugins/sudoers/sudoers.c:354 plugins/sudoers/sudoers.c:380
+#: plugins/sudoers/sudoers.c:447 plugins/sudoers/sudoers.c:464
+#: plugins/sudoers/sudoers.c:505 plugins/sudoers/sudoers.c:849
+#: plugins/sudoers/sudoers.c:902 plugins/sudoers/sudoers.c:1054
+#: plugins/sudoers/sudoers.c:1114 plugins/sudoers/sudoers.c:1369
+#: plugins/sudoers/sudoreplay.c:559 plugins/sudoers/sudoreplay.c:562
+#: plugins/sudoers/sudoreplay.c:1278 plugins/sudoers/sudoreplay.c:1334
+#: plugins/sudoers/sudoreplay.c:1530 plugins/sudoers/sudoreplay.c:1534
 #: plugins/sudoers/testsudoers.c:120 plugins/sudoers/testsudoers.c:224
 #: plugins/sudoers/testsudoers.c:241 plugins/sudoers/testsudoers.c:588
 #: plugins/sudoers/timestamp.c:451 plugins/sudoers/timestamp.c:495
@@ -192,8 +192,8 @@ msgstr ""
 #: plugins/sudoers/toke_util.c:131 plugins/sudoers/toke_util.c:161
 #: plugins/sudoers/toke_util.c:200 plugins/sudoers/tsdump.c:123
 #: plugins/sudoers/visudo.c:150 plugins/sudoers/visudo.c:385
-#: plugins/sudoers/visudo.c:391 plugins/sudoers/visudo.c:498
-#: plugins/sudoers/visudo.c:1054 toke.l:1023 toke.l:1155 toke.l:1226
+#: plugins/sudoers/visudo.c:391 plugins/sudoers/visudo.c:502
+#: plugins/sudoers/visudo.c:1056 toke.l:1031 toke.l:1163 toke.l:1234
 msgid "unable to allocate memory"
 msgstr ""
 
@@ -230,15 +230,15 @@ msgstr ""
 msgid "invalid notafter value"
 msgstr ""
 
-#: gram.y:844 plugins/sudoers/policy.c:383
+#: gram.y:844 plugins/sudoers/policy.c:385
 msgid "timeout value too large"
 msgstr ""
 
-#: gram.y:846 plugins/sudoers/policy.c:385
+#: gram.y:846 plugins/sudoers/policy.c:387
 msgid "invalid timeout value"
 msgstr ""
 
-#: gram.y:967 plugins/sudoers/sudoers.c:1033
+#: gram.y:967 plugins/sudoers/sudoers.c:1072
 msgid "command too long"
 msgstr ""
 
@@ -253,34 +253,33 @@ msgstr ""
 msgid "Alias \"%s\" already defined"
 msgstr ""
 
-#: gram.y:1777 gram.y:1827 lib/eventlog/eventlog.c:309
-#: lib/eventlog/eventlog.c:827 lib/eventlog/eventlog.c:900
-#: lib/eventlog/eventlog.c:903 lib/eventlog/eventlog.c:1204
+#: gram.y:1777 gram.y:1827 lib/eventlog/eventlog.c:235
+#: lib/eventlog/eventlog.c:757 lib/eventlog/eventlog.c:830
+#: lib/eventlog/eventlog.c:833 lib/eventlog/eventlog.c:1135
 #: lib/iolog/iolog_filter.c:142 lib/iolog/iolog_filter.c:202
 #: lib/iolog/iolog_filter.c:232 lib/iolog/iolog_json.c:150
 #: lib/iolog/iolog_json.c:381 lib/iolog/iolog_json.c:412
-#: lib/iolog/iolog_json.c:555 lib/iolog/iolog_legacy.c:100
-#: lib/iolog/iolog_legacy.c:111 lib/iolog/iolog_legacy.c:123
-#: lib/iolog/iolog_legacy.c:133 lib/iolog/iolog_legacy.c:139
-#: lib/iolog/iolog_loginfo.c:76 lib/iolog/iolog_loginfo.c:212
-#: logsrvd/iolog_writer.c:95 logsrvd/iolog_writer.c:100
-#: logsrvd/iolog_writer.c:134 logsrvd/iolog_writer.c:171
-#: logsrvd/iolog_writer.c:181 logsrvd/iolog_writer.c:194
-#: logsrvd/iolog_writer.c:214 logsrvd/iolog_writer.c:224
-#: logsrvd/iolog_writer.c:243 logsrvd/iolog_writer.c:253
-#: logsrvd/iolog_writer.c:264 logsrvd/iolog_writer.c:274
-#: logsrvd/iolog_writer.c:286 logsrvd/iolog_writer.c:296
-#: logsrvd/iolog_writer.c:306 logsrvd/iolog_writer.c:316
-#: logsrvd/iolog_writer.c:328 logsrvd/iolog_writer.c:364
-#: logsrvd/iolog_writer.c:370 logsrvd/iolog_writer.c:377
-#: logsrvd/iolog_writer.c:383 logsrvd/iolog_writer.c:567
-#: logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301 logsrvd/logsrvd.c:310
-#: logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:490 logsrvd/logsrvd.c:522
-#: logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:611 logsrvd/logsrvd.c:660
-#: logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:732 logsrvd/logsrvd.c:1124
-#: logsrvd/logsrvd.c:1439 logsrvd/logsrvd.c:1446 logsrvd/logsrvd.c:1582
-#: logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771 logsrvd/logsrvd.c:1988
-#: logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
+#: lib/iolog/iolog_legacy.c:100 lib/iolog/iolog_legacy.c:111
+#: lib/iolog/iolog_legacy.c:123 lib/iolog/iolog_legacy.c:133
+#: lib/iolog/iolog_legacy.c:139 lib/iolog/iolog_loginfo.c:76
+#: lib/iolog/iolog_loginfo.c:212 logsrvd/iolog_writer.c:95
+#: logsrvd/iolog_writer.c:100 logsrvd/iolog_writer.c:134
+#: logsrvd/iolog_writer.c:171 logsrvd/iolog_writer.c:181
+#: logsrvd/iolog_writer.c:194 logsrvd/iolog_writer.c:214
+#: logsrvd/iolog_writer.c:224 logsrvd/iolog_writer.c:243
+#: logsrvd/iolog_writer.c:253 logsrvd/iolog_writer.c:264
+#: logsrvd/iolog_writer.c:274 logsrvd/iolog_writer.c:286
+#: logsrvd/iolog_writer.c:296 logsrvd/iolog_writer.c:306
+#: logsrvd/iolog_writer.c:316 logsrvd/iolog_writer.c:328
+#: logsrvd/iolog_writer.c:364 logsrvd/iolog_writer.c:370
+#: logsrvd/iolog_writer.c:377 logsrvd/iolog_writer.c:383
+#: logsrvd/iolog_writer.c:567 logsrvd/logsrv_util.c:69 logsrvd/logsrvd.c:301
+#: logsrvd/logsrvd.c:310 logsrvd/logsrvd.c:453 logsrvd/logsrvd.c:490
+#: logsrvd/logsrvd.c:522 logsrvd/logsrvd.c:576 logsrvd/logsrvd.c:611
+#: logsrvd/logsrvd.c:660 logsrvd/logsrvd.c:696 logsrvd/logsrvd.c:732
+#: logsrvd/logsrvd.c:1124 logsrvd/logsrvd.c:1439 logsrvd/logsrvd.c:1446
+#: logsrvd/logsrvd.c:1582 logsrvd/logsrvd.c:1587 logsrvd/logsrvd.c:1771
+#: logsrvd/logsrvd.c:1988 logsrvd/logsrvd_conf.c:357 logsrvd/logsrvd_conf.c:370
 #: logsrvd/logsrvd_conf.c:511 logsrvd/logsrvd_conf.c:534
 #: logsrvd/logsrvd_conf.c:538 logsrvd/logsrvd_conf.c:556
 #: logsrvd/logsrvd_conf.c:626 logsrvd/logsrvd_conf.c:649
@@ -292,11 +291,11 @@ msgstr ""
 #: logsrvd/logsrvd_conf.c:1595 logsrvd/logsrvd_conf.c:1621
 #: logsrvd/logsrvd_conf.c:1633 logsrvd/logsrvd_conf.c:1640
 #: logsrvd/logsrvd_conf.c:1646 logsrvd/logsrvd_conf.c:1742
-#: logsrvd/logsrvd_journal.c:75 logsrvd/logsrvd_journal.c:122
-#: logsrvd/logsrvd_journal.c:213 logsrvd/logsrvd_journal.c:243
-#: logsrvd/logsrvd_journal.c:247 logsrvd/logsrvd_journal.c:255
-#: logsrvd/logsrvd_journal.c:278 logsrvd/logsrvd_journal.c:282
-#: logsrvd/logsrvd_journal.c:430 logsrvd/logsrvd_local.c:215
+#: logsrvd/logsrvd_journal.c:76 logsrvd/logsrvd_journal.c:125
+#: logsrvd/logsrvd_journal.c:216 logsrvd/logsrvd_journal.c:246
+#: logsrvd/logsrvd_journal.c:250 logsrvd/logsrvd_journal.c:258
+#: logsrvd/logsrvd_journal.c:281 logsrvd/logsrvd_journal.c:285
+#: logsrvd/logsrvd_journal.c:433 logsrvd/logsrvd_local.c:215
 #: logsrvd/logsrvd_local.c:278 logsrvd/logsrvd_local.c:466
 #: logsrvd/logsrvd_local.c:472 logsrvd/logsrvd_local.c:491
 #: logsrvd/logsrvd_queue.c:158 logsrvd/logsrvd_queue.c:189
@@ -334,80 +333,80 @@ msgstr ""
 #: plugins/sudoers/cvtsudoers_merge.c:1157
 #: plugins/sudoers/cvtsudoers_merge.c:1231 plugins/sudoers/defaults.c:434
 #: plugins/sudoers/defaults.c:658 plugins/sudoers/defaults.c:1019
-#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:188
+#: plugins/sudoers/defaults.c:1187 plugins/sudoers/editor.c:197
 #: plugins/sudoers/env.c:263 plugins/sudoers/exptilde.c:92
 #: plugins/sudoers/filedigest.c:54 plugins/sudoers/filedigest.c:70
-#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:227
+#: plugins/sudoers/gc.c:57 plugins/sudoers/group_plugin.c:211
 #: plugins/sudoers/interfaces.c:68 plugins/sudoers/iolog.c:268
 #: plugins/sudoers/iolog.c:668 plugins/sudoers/iolog.c:694
-#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:464
-#: plugins/sudoers/ldap.c:755 plugins/sudoers/ldap.c:919
-#: plugins/sudoers/ldap.c:1335 plugins/sudoers/ldap.c:1761
-#: plugins/sudoers/ldap.c:1798 plugins/sudoers/ldap.c:1879
-#: plugins/sudoers/ldap.c:2014 plugins/sudoers/ldap.c:2115
-#: plugins/sudoers/ldap.c:2131 plugins/sudoers/ldap_conf.c:218
-#: plugins/sudoers/ldap_conf.c:250 plugins/sudoers/ldap_conf.c:302
-#: plugins/sudoers/ldap_conf.c:338 plugins/sudoers/ldap_conf.c:444
-#: plugins/sudoers/ldap_conf.c:459 plugins/sudoers/ldap_conf.c:564
-#: plugins/sudoers/ldap_conf.c:597 plugins/sudoers/ldap_conf.c:688
-#: plugins/sudoers/ldap_conf.c:771 plugins/sudoers/ldap_util.c:293
-#: plugins/sudoers/ldap_util.c:300 plugins/sudoers/ldap_util.c:614
-#: plugins/sudoers/linux_audit.c:86 plugins/sudoers/log_client.c:117
-#: plugins/sudoers/log_client.c:228 plugins/sudoers/log_client.c:250
-#: plugins/sudoers/log_client.c:264 plugins/sudoers/log_client.c:402
-#: plugins/sudoers/log_client.c:715 plugins/sudoers/log_client.c:736
-#: plugins/sudoers/log_client.c:1416 plugins/sudoers/log_client.c:1537
-#: plugins/sudoers/log_client.c:1637 plugins/sudoers/log_client.c:1973
-#: plugins/sudoers/log_client.c:2032 plugins/sudoers/logging.c:110
-#: plugins/sudoers/logging.c:188 plugins/sudoers/logging.c:189
-#: plugins/sudoers/logging.c:453 plugins/sudoers/logging.c:668
-#: plugins/sudoers/logging.c:805 plugins/sudoers/logging.c:876
-#: plugins/sudoers/logging.c:888 plugins/sudoers/match_command.c:334
-#: plugins/sudoers/match_command.c:602 plugins/sudoers/match_command.c:653
-#: plugins/sudoers/match_command.c:728 plugins/sudoers/match_command.c:775
-#: plugins/sudoers/match_digest.c:93 plugins/sudoers/parse.c:226
-#: plugins/sudoers/parse.c:243 plugins/sudoers/parse.c:262
-#: plugins/sudoers/parse.c:281 plugins/sudoers/parse.c:298
-#: plugins/sudoers/parse.c:321 plugins/sudoers/parse.c:332
-#: plugins/sudoers/parse_ldif.c:152 plugins/sudoers/parse_ldif.c:183
-#: plugins/sudoers/parse_ldif.c:252 plugins/sudoers/parse_ldif.c:260
-#: plugins/sudoers/parse_ldif.c:265 plugins/sudoers/parse_ldif.c:341
-#: plugins/sudoers/parse_ldif.c:352 plugins/sudoers/parse_ldif.c:379
-#: plugins/sudoers/parse_ldif.c:396 plugins/sudoers/parse_ldif.c:408
-#: plugins/sudoers/parse_ldif.c:412 plugins/sudoers/parse_ldif.c:426
-#: plugins/sudoers/parse_ldif.c:484 plugins/sudoers/parse_ldif.c:598
-#: plugins/sudoers/parse_ldif.c:627 plugins/sudoers/parse_ldif.c:652
-#: plugins/sudoers/parse_ldif.c:710 plugins/sudoers/parse_ldif.c:727
-#: plugins/sudoers/parse_ldif.c:755 plugins/sudoers/parse_ldif.c:762
-#: plugins/sudoers/policy.c:153 plugins/sudoers/policy.c:162
-#: plugins/sudoers/policy.c:171 plugins/sudoers/policy.c:199
-#: plugins/sudoers/policy.c:368 plugins/sudoers/policy.c:383
-#: plugins/sudoers/policy.c:385 plugins/sudoers/policy.c:423
-#: plugins/sudoers/policy.c:432 plugins/sudoers/policy.c:480
-#: plugins/sudoers/policy.c:490 plugins/sudoers/policy.c:499
-#: plugins/sudoers/policy.c:508 plugins/sudoers/policy.c:517
-#: plugins/sudoers/policy.c:624 plugins/sudoers/policy.c:1026
-#: plugins/sudoers/prompt.c:93 plugins/sudoers/pwutil.c:199
-#: plugins/sudoers/pwutil.c:270 plugins/sudoers/pwutil.c:348
-#: plugins/sudoers/pwutil.c:522 plugins/sudoers/pwutil.c:587
-#: plugins/sudoers/pwutil.c:659 plugins/sudoers/pwutil.c:857
-#: plugins/sudoers/pwutil.c:913 plugins/sudoers/pwutil.c:957
-#: plugins/sudoers/pwutil.c:1014 plugins/sudoers/set_perms.c:363
-#: plugins/sudoers/set_perms.c:706 plugins/sudoers/set_perms.c:1073
-#: plugins/sudoers/set_perms.c:1380 plugins/sudoers/set_perms.c:1549
-#: plugins/sudoers/sssd.c:144 plugins/sudoers/sssd.c:185
-#: plugins/sudoers/sssd.c:414 plugins/sudoers/sssd.c:479
-#: plugins/sudoers/sssd.c:505 plugins/sudoers/sssd.c:568
-#: plugins/sudoers/sssd.c:761 plugins/sudoers/strvec_join.c:53
-#: plugins/sudoers/stubs.c:112 plugins/sudoers/stubs.c:120
-#: plugins/sudoers/sudoers.c:354 plugins/sudoers/sudoers.c:380
-#: plugins/sudoers/sudoers.c:448 plugins/sudoers/sudoers.c:457
-#: plugins/sudoers/sudoers.c:498 plugins/sudoers/sudoers.c:827
-#: plugins/sudoers/sudoers.c:877 plugins/sudoers/sudoers.c:1015
-#: plugins/sudoers/sudoers.c:1075 plugins/sudoers/sudoers.c:1330
-#: plugins/sudoers/sudoreplay.c:562 plugins/sudoers/sudoreplay.c:565
-#: plugins/sudoers/sudoreplay.c:1281 plugins/sudoers/sudoreplay.c:1503
-#: plugins/sudoers/sudoreplay.c:1507 plugins/sudoers/testsudoers.c:120
+#: plugins/sudoers/ldap.c:184 plugins/sudoers/ldap.c:466
+#: plugins/sudoers/ldap.c:757 plugins/sudoers/ldap.c:921
+#: plugins/sudoers/ldap.c:1337 plugins/sudoers/ldap.c:1763
+#: plugins/sudoers/ldap.c:1800 plugins/sudoers/ldap.c:2016
+#: plugins/sudoers/ldap.c:2117 plugins/sudoers/ldap.c:2133
+#: plugins/sudoers/ldap_conf.c:218 plugins/sudoers/ldap_conf.c:250
+#: plugins/sudoers/ldap_conf.c:302 plugins/sudoers/ldap_conf.c:338
+#: plugins/sudoers/ldap_conf.c:444 plugins/sudoers/ldap_conf.c:459
+#: plugins/sudoers/ldap_conf.c:564 plugins/sudoers/ldap_conf.c:597
+#: plugins/sudoers/ldap_conf.c:688 plugins/sudoers/ldap_conf.c:771
+#: plugins/sudoers/ldap_util.c:293 plugins/sudoers/ldap_util.c:300
+#: plugins/sudoers/ldap_util.c:614 plugins/sudoers/linux_audit.c:86
+#: plugins/sudoers/log_client.c:117 plugins/sudoers/log_client.c:228
+#: plugins/sudoers/log_client.c:250 plugins/sudoers/log_client.c:264
+#: plugins/sudoers/log_client.c:402 plugins/sudoers/log_client.c:715
+#: plugins/sudoers/log_client.c:736 plugins/sudoers/log_client.c:1415
+#: plugins/sudoers/log_client.c:1536 plugins/sudoers/log_client.c:1636
+#: plugins/sudoers/log_client.c:1972 plugins/sudoers/log_client.c:2031
+#: plugins/sudoers/logging.c:110 plugins/sudoers/logging.c:188
+#: plugins/sudoers/logging.c:189 plugins/sudoers/logging.c:457
+#: plugins/sudoers/logging.c:672 plugins/sudoers/logging.c:809
+#: plugins/sudoers/logging.c:880 plugins/sudoers/logging.c:892
+#: plugins/sudoers/match_command.c:334 plugins/sudoers/match_command.c:602
+#: plugins/sudoers/match_command.c:653 plugins/sudoers/match_command.c:728
+#: plugins/sudoers/match_command.c:775 plugins/sudoers/match_digest.c:93
+#: plugins/sudoers/parse.c:266 plugins/sudoers/parse.c:283
+#: plugins/sudoers/parse.c:302 plugins/sudoers/parse.c:321
+#: plugins/sudoers/parse.c:338 plugins/sudoers/parse.c:361
+#: plugins/sudoers/parse.c:372 plugins/sudoers/parse_ldif.c:152
+#: plugins/sudoers/parse_ldif.c:183 plugins/sudoers/parse_ldif.c:252
+#: plugins/sudoers/parse_ldif.c:260 plugins/sudoers/parse_ldif.c:265
+#: plugins/sudoers/parse_ldif.c:341 plugins/sudoers/parse_ldif.c:352
+#: plugins/sudoers/parse_ldif.c:379 plugins/sudoers/parse_ldif.c:396
+#: plugins/sudoers/parse_ldif.c:408 plugins/sudoers/parse_ldif.c:412
+#: plugins/sudoers/parse_ldif.c:426 plugins/sudoers/parse_ldif.c:484
+#: plugins/sudoers/parse_ldif.c:598 plugins/sudoers/parse_ldif.c:627
+#: plugins/sudoers/parse_ldif.c:652 plugins/sudoers/parse_ldif.c:710
+#: plugins/sudoers/parse_ldif.c:727 plugins/sudoers/parse_ldif.c:755
+#: plugins/sudoers/parse_ldif.c:762 plugins/sudoers/policy.c:154
+#: plugins/sudoers/policy.c:163 plugins/sudoers/policy.c:172
+#: plugins/sudoers/policy.c:201 plugins/sudoers/policy.c:370
+#: plugins/sudoers/policy.c:385 plugins/sudoers/policy.c:387
+#: plugins/sudoers/policy.c:425 plugins/sudoers/policy.c:434
+#: plugins/sudoers/policy.c:482 plugins/sudoers/policy.c:492
+#: plugins/sudoers/policy.c:501 plugins/sudoers/policy.c:510
+#: plugins/sudoers/policy.c:519 plugins/sudoers/policy.c:626
+#: plugins/sudoers/policy.c:1033 plugins/sudoers/prompt.c:93
+#: plugins/sudoers/pwutil.c:199 plugins/sudoers/pwutil.c:270
+#: plugins/sudoers/pwutil.c:348 plugins/sudoers/pwutil.c:522
+#: plugins/sudoers/pwutil.c:587 plugins/sudoers/pwutil.c:659
+#: plugins/sudoers/pwutil.c:857 plugins/sudoers/pwutil.c:945
+#: plugins/sudoers/pwutil.c:993 plugins/sudoers/pwutil.c:1052
+#: plugins/sudoers/set_perms.c:363 plugins/sudoers/set_perms.c:706
+#: plugins/sudoers/set_perms.c:1073 plugins/sudoers/set_perms.c:1380
+#: plugins/sudoers/set_perms.c:1549 plugins/sudoers/sssd.c:144
+#: plugins/sudoers/sssd.c:185 plugins/sudoers/sssd.c:414
+#: plugins/sudoers/sssd.c:479 plugins/sudoers/sssd.c:505
+#: plugins/sudoers/sssd.c:568 plugins/sudoers/sssd.c:761
+#: plugins/sudoers/strvec_join.c:53 plugins/sudoers/stubs.c:112
+#: plugins/sudoers/stubs.c:120 plugins/sudoers/sudoers.c:354
+#: plugins/sudoers/sudoers.c:380 plugins/sudoers/sudoers.c:447
+#: plugins/sudoers/sudoers.c:464 plugins/sudoers/sudoers.c:505
+#: plugins/sudoers/sudoers.c:849 plugins/sudoers/sudoers.c:902
+#: plugins/sudoers/sudoers.c:1054 plugins/sudoers/sudoers.c:1114
+#: plugins/sudoers/sudoers.c:1369 plugins/sudoers/sudoreplay.c:559
+#: plugins/sudoers/sudoreplay.c:562 plugins/sudoers/sudoreplay.c:1278
+#: plugins/sudoers/sudoreplay.c:1334 plugins/sudoers/sudoreplay.c:1530
+#: plugins/sudoers/sudoreplay.c:1534 plugins/sudoers/testsudoers.c:120
 #: plugins/sudoers/testsudoers.c:224 plugins/sudoers/testsudoers.c:241
 #: plugins/sudoers/testsudoers.c:588 plugins/sudoers/timestamp.c:451
 #: plugins/sudoers/timestamp.c:495 plugins/sudoers/timestamp.c:1017
@@ -416,68 +415,48 @@ msgstr ""
 #: plugins/sudoers/toke_util.c:160 plugins/sudoers/toke_util.c:200
 #: plugins/sudoers/tsdump.c:123 plugins/sudoers/visudo.c:150
 #: plugins/sudoers/visudo.c:385 plugins/sudoers/visudo.c:391
-#: plugins/sudoers/visudo.c:498 plugins/sudoers/visudo.c:1054 toke.l:1023
-#: toke.l:1155 toke.l:1218 toke.l:1226
+#: plugins/sudoers/visudo.c:502 plugins/sudoers/visudo.c:1056 toke.l:1031
+#: toke.l:1163 toke.l:1226 toke.l:1234
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:314 lib/iolog/iolog_json.c:562
-#: lib/iolog/iolog_json.c:568 lib/iolog/iolog_json.c:574
-#: plugins/sudoers/cvtsudoers_csv.c:192 plugins/sudoers/cvtsudoers_csv.c:199
-#: plugins/sudoers/cvtsudoers_ldif.c:244 plugins/sudoers/cvtsudoers_ldif.c:251
-#: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:340
-#: plugins/sudoers/env.c:347 plugins/sudoers/env.c:458
-#: plugins/sudoers/ldap.c:526 plugins/sudoers/ldap.c:759
-#: plugins/sudoers/ldap.c:1132 plugins/sudoers/ldap_conf.c:222
-#: plugins/sudoers/ldap_conf.c:313 plugins/sudoers/ldap_util.c:486
-#: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:457
-#: plugins/sudoers/logging.c:813 plugins/sudoers/logging.c:823
-#: plugins/sudoers/policy.c:800 plugins/sudoers/policy.c:811
-#: plugins/sudoers/prompt.c:168 plugins/sudoers/serialize_list.c:62
-#: plugins/sudoers/serialize_list.c:71 plugins/sudoers/strvec_join.c:62
-#: plugins/sudoers/testsudoers.c:245 plugins/sudoers/toke_util.c:213 toke.l:987
-#: toke.l:1189
-#, c-format
-msgid "internal error, %s overflow"
-msgstr ""
-
-#: lib/eventlog/eventlog.c:373
+#: lib/eventlog/eventlog.c:303
 #, c-format
 msgid "unable to dup stdin: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:415
+#: lib/eventlog/eventlog.c:345
 #, c-format
 msgid "unable to execute %s: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:463 plugins/sudoers/auth/aix_auth.c:198
+#: lib/eventlog/eventlog.c:393 plugins/sudoers/auth/aix_auth.c:198
 msgid "unable to fork"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:473 lib/eventlog/eventlog.c:538
+#: lib/eventlog/eventlog.c:403 lib/eventlog/eventlog.c:468
 #, c-format
 msgid "unable to fork: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:528
+#: lib/eventlog/eventlog.c:458
 #, c-format
 msgid "unable to open pipe: %m"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:1030
+#: lib/eventlog/eventlog.c:960
 #, c-format
 msgid "%8s : %s"
 msgstr ""
 
-#: lib/eventlog/eventlog.c:1059
+#: lib/eventlog/eventlog.c:989
 #, c-format
 msgid "%8s : (command continued) %s"
 msgstr ""
 
 #: lib/iolog/iolog_filter.c:133 plugins/sudoers/defaults.c:1242
-#: plugins/sudoers/sudoreplay.c:1293 plugins/sudoers/sudoreplay.c:1558
+#: plugins/sudoers/sudoreplay.c:1290 plugins/sudoers/sudoreplay.c:1586
 #, c-format
 msgid "invalid regular expression \"%s\": %s"
 msgstr ""
@@ -495,64 +474,64 @@ msgstr ""
 msgid "missing double quote in name"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:501
+#: lib/iolog/iolog_json.c:511
 msgid "missing JSON_OBJECT"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:505
+#: lib/iolog/iolog_json.c:515
 #, c-format
 msgid "expected JSON_OBJECT, got %d"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:661
+#: lib/iolog/iolog_json.c:632
 #, c-format
 msgid "json stack exhausted (max %u frames)"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:735
+#: lib/iolog/iolog_json.c:706
 msgid "objects must consist of name:value pairs"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:740 lib/iolog/iolog_json.c:771
-#: lib/iolog/iolog_json.c:815 lib/iolog/iolog_json.c:837
-#: lib/iolog/iolog_json.c:859 lib/iolog/iolog_json.c:881
-#: lib/iolog/iolog_json.c:903
+#: lib/iolog/iolog_json.c:711 lib/iolog/iolog_json.c:742
+#: lib/iolog/iolog_json.c:786 lib/iolog/iolog_json.c:808
+#: lib/iolog/iolog_json.c:830 lib/iolog/iolog_json.c:852
+#: lib/iolog/iolog_json.c:874
 msgid "missing separator between values"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:755 lib/iolog/iolog_json.c:929
+#: lib/iolog/iolog_json.c:726 lib/iolog/iolog_json.c:900
 msgid "unmatched close brace"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:766
+#: lib/iolog/iolog_json.c:737
 msgid "unexpected array"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:786 lib/iolog/iolog_json.c:932
+#: lib/iolog/iolog_json.c:757 lib/iolog/iolog_json.c:903
 msgid "unmatched close bracket"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:797
+#: lib/iolog/iolog_json.c:768
 msgid "unexpected string"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:808
+#: lib/iolog/iolog_json.c:779
 msgid "missing colon after name"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:829 lib/iolog/iolog_json.c:851
+#: lib/iolog/iolog_json.c:800 lib/iolog/iolog_json.c:822
 msgid "unexpected boolean"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:873
+#: lib/iolog/iolog_json.c:844
 msgid "unexpected null"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:894
+#: lib/iolog/iolog_json.c:865
 msgid "unexpected number"
 msgstr ""
 
-#: lib/iolog/iolog_json.c:941
+#: lib/iolog/iolog_json.c:912
 msgid "parse error"
 msgstr ""
 
@@ -591,14 +570,14 @@ msgstr ""
 msgid "%s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/iolog/iolog_mkdirs.c:123 lib/iolog/iolog_mkdtemp.c:78
+#: lib/iolog/iolog_mkdirs.c:123 lib/iolog/iolog_mkdtemp.c:79
 #: logsrvd/iolog_writer.c:781 plugins/sudoers/timestamp.c:209
 #, c-format
 msgid "unable to mkdir %s"
 msgstr ""
 
-#: lib/iolog/iolog_mkdtemp.c:83 plugins/sudoers/visudo.c:753
-#: plugins/sudoers/visudo.c:787 plugins/sudoers/visudo.c:793
+#: lib/iolog/iolog_mkdtemp.c:84 plugins/sudoers/visudo.c:757
+#: plugins/sudoers/visudo.c:791 plugins/sudoers/visudo.c:797
 #, c-format
 msgid "unable to change mode of %s to 0%o"
 msgstr ""
@@ -630,8 +609,8 @@ msgstr ""
 msgid "%s: protocol error: NULL value found in %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:976
-#: plugins/sudoers/policy.c:591
+#: logsrvd/iolog_writer.c:141 plugins/sudoers/logging.c:980
+#: plugins/sudoers/policy.c:593
 msgid "unable to generate UUID"
 msgstr ""
 
@@ -683,27 +662,27 @@ msgstr ""
 msgid "invalid I/O log %s: %s referenced but not present"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:382
+#: logsrvd/iolog_writer.c:763 logsrvd/logsrvd_journal.c:385
 #, c-format
 msgid "%s: unable to find resume point [%lld, %ld]"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:425
+#: logsrvd/iolog_writer.c:785 logsrvd/logsrvd_journal.c:428
 #: logsrvd/logsrvd_queue.c:115 logsrvd/tls_init.c:256
 #: plugins/sudoers/check.c:292 plugins/sudoers/cvtsudoers.c:730
 #: plugins/sudoers/cvtsudoers.c:751 plugins/sudoers/cvtsudoers.c:1431
 #: plugins/sudoers/cvtsudoers_csv.c:695 plugins/sudoers/cvtsudoers_json.c:898
-#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1113
-#: plugins/sudoers/sudoers.c:1143 plugins/sudoers/sudoreplay.c:1469
+#: plugins/sudoers/cvtsudoers_ldif.c:709 plugins/sudoers/sudoers.c:1152
+#: plugins/sudoers/sudoers.c:1182 plugins/sudoers/sudoreplay.c:1496
 #: plugins/sudoers/timestamp.c:460 plugins/sudoers/tsdump.c:128
-#: plugins/sudoers/visudo.c:971
+#: plugins/sudoers/visudo.c:975
 #, c-format
 msgid "unable to open %s"
 msgstr ""
 
 #: logsrvd/iolog_writer.c:797 logsrvd/logsrv_util.c:105
-#: logsrvd/logsrv_util.c:112 plugins/sudoers/sudoreplay.c:362
-#: plugins/sudoers/sudoreplay.c:368
+#: logsrvd/logsrv_util.c:112 plugins/sudoers/sudoreplay.c:355
+#: plugins/sudoers/sudoreplay.c:361
 #, c-format
 msgid "unable to open %s/%s"
 msgstr ""
@@ -713,7 +692,7 @@ msgstr ""
 msgid "unable to copy %s/%s to %s/%s: %s"
 msgstr ""
 
-#: logsrvd/iolog_writer.c:839 logsrvd/logsrvd_journal.c:195
+#: logsrvd/iolog_writer.c:839 logsrvd/logsrvd_journal.c:198
 #, c-format
 msgid "unable to rename %s to %s"
 msgstr ""
@@ -746,28 +725,28 @@ msgstr ""
 #: logsrvd/logsrvd.c:873 logsrvd/logsrvd.c:887 logsrvd/logsrvd.c:1049
 #: logsrvd/logsrvd.c:1174 logsrvd/logsrvd.c:1347 logsrvd/logsrvd.c:1365
 #: logsrvd/logsrvd.c:1464 logsrvd/logsrvd.c:1589 logsrvd/logsrvd.c:1773
-#: logsrvd/logsrvd_journal.c:494 logsrvd/logsrvd_local.c:238
+#: logsrvd/logsrvd_journal.c:497 logsrvd/logsrvd_local.c:238
 #: logsrvd/logsrvd_queue.c:164 logsrvd/logsrvd_relay.c:172
 #: logsrvd/logsrvd_relay.c:249 logsrvd/logsrvd_relay.c:253
 #: logsrvd/logsrvd_relay.c:389 logsrvd/logsrvd_relay.c:581
 #: logsrvd/logsrvd_relay.c:742 logsrvd/logsrvd_relay.c:1131
 #: logsrvd/sendlog.c:1291 logsrvd/tls_client.c:136 logsrvd/tls_client.c:152
 #: logsrvd/tls_client.c:216 plugins/sudoers/audit.c:278
-#: plugins/sudoers/iolog.c:1033 plugins/sudoers/iolog.c:1166
-#: plugins/sudoers/iolog.c:1264 plugins/sudoers/log_client.c:121
+#: plugins/sudoers/iolog.c:1031 plugins/sudoers/iolog.c:1164
+#: plugins/sudoers/iolog.c:1262 plugins/sudoers/log_client.c:121
 #: plugins/sudoers/log_client.c:343 plugins/sudoers/log_client.c:359
 #: plugins/sudoers/log_client.c:407 plugins/sudoers/log_client.c:611
 #: plugins/sudoers/log_client.c:618 plugins/sudoers/log_client.c:1103
-#: plugins/sudoers/log_client.c:1385 plugins/sudoers/log_client.c:1426
-#: plugins/sudoers/log_client.c:1434 plugins/sudoers/log_client.c:1593
-#: plugins/sudoers/log_client.c:1711 plugins/sudoers/log_client.c:2040
-#: plugins/sudoers/log_client.c:2048 plugins/sudoers/logging.c:147
-#: plugins/sudoers/logging.c:205 plugins/sudoers/sudoreplay.c:522
-#: plugins/sudoers/sudoreplay.c:569 plugins/sudoers/sudoreplay.c:811
-#: plugins/sudoers/sudoreplay.c:923 plugins/sudoers/sudoreplay.c:1014
-#: plugins/sudoers/sudoreplay.c:1029 plugins/sudoers/sudoreplay.c:1036
-#: plugins/sudoers/sudoreplay.c:1043 plugins/sudoers/sudoreplay.c:1050
-#: plugins/sudoers/sudoreplay.c:1057 plugins/sudoers/sudoreplay.c:1184
+#: plugins/sudoers/log_client.c:1384 plugins/sudoers/log_client.c:1425
+#: plugins/sudoers/log_client.c:1433 plugins/sudoers/log_client.c:1592
+#: plugins/sudoers/log_client.c:1710 plugins/sudoers/log_client.c:2039
+#: plugins/sudoers/log_client.c:2047 plugins/sudoers/logging.c:147
+#: plugins/sudoers/logging.c:205 plugins/sudoers/sudoreplay.c:519
+#: plugins/sudoers/sudoreplay.c:566 plugins/sudoers/sudoreplay.c:808
+#: plugins/sudoers/sudoreplay.c:920 plugins/sudoers/sudoreplay.c:1011
+#: plugins/sudoers/sudoreplay.c:1026 plugins/sudoers/sudoreplay.c:1033
+#: plugins/sudoers/sudoreplay.c:1040 plugins/sudoers/sudoreplay.c:1047
+#: plugins/sudoers/sudoreplay.c:1054 plugins/sudoers/sudoreplay.c:1181
 msgid "unable to add event to queue"
 msgstr ""
 
@@ -827,14 +806,14 @@ msgstr ""
 msgid "invalid CommandSuspend"
 msgstr ""
 
-#: logsrvd/logsrvd.c:782 logsrvd/logsrvd_journal.c:293
+#: logsrvd/logsrvd.c:782 logsrvd/logsrvd_journal.c:296
 #: logsrvd/logsrvd_relay.c:652 logsrvd/sendlog.c:1192
-#: plugins/sudoers/log_client.c:1583
+#: plugins/sudoers/log_client.c:1582
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:827 logsrvd/logsrvd_journal.c:367
+#: logsrvd/logsrvd.c:827 logsrvd/logsrvd_journal.c:370
 #: logsrvd/logsrvd_relay.c:676
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
@@ -870,8 +849,8 @@ msgstr ""
 msgid "client message too large: %zu"
 msgstr ""
 
-#: logsrvd/logsrvd.c:1106 logsrvd/logsrvd_journal.c:256
-#: logsrvd/logsrvd_journal.c:257
+#: logsrvd/logsrvd.c:1106 logsrvd/logsrvd_journal.c:259
+#: logsrvd/logsrvd_journal.c:260
 msgid "client message too large"
 msgstr ""
 
@@ -936,23 +915,23 @@ msgid "invalid random drop value: %s"
 msgstr ""
 
 #: logsrvd/logsrvd.c:1975 logsrvd/sendlog.c:1756
-#: plugins/sudoers/cvtsudoers.c:246 plugins/sudoers/sudoreplay.c:301
+#: plugins/sudoers/cvtsudoers.c:246 plugins/sudoers/sudoreplay.c:294
 #: plugins/sudoers/visudo.c:182
 #, c-format
 msgid "%s version %s\n"
 msgstr ""
 
-#: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:353
+#: logsrvd/logsrvd_conf.c:422 plugins/sudoers/check.c:358
 #: plugins/sudoers/exptilde.c:85 plugins/sudoers/iolog.c:122
-#: plugins/sudoers/policy.c:1264 plugins/sudoers/sudoers.c:505
-#: plugins/sudoers/sudoers.c:1372 plugins/sudoers/testsudoers.c:215
+#: plugins/sudoers/policy.c:1271 plugins/sudoers/sudoers.c:512
+#: plugins/sudoers/sudoers.c:1411 plugins/sudoers/testsudoers.c:215
 #: plugins/sudoers/testsudoers.c:382
 #, c-format
 msgid "unknown user %s"
 msgstr ""
 
 #: logsrvd/logsrvd_conf.c:439 plugins/sudoers/iolog.c:148
-#: plugins/sudoers/sudoers.c:510 plugins/sudoers/sudoers.c:1406
+#: plugins/sudoers/sudoers.c:517 plugins/sudoers/sudoers.c:1445
 #: plugins/sudoers/testsudoers.c:406
 #, c-format
 msgid "unknown group %s"
@@ -1026,7 +1005,7 @@ msgid "%s:%d [%s] illegal key: %s"
 msgstr ""
 
 #: logsrvd/logsrvd_conf.c:1281 plugins/sudoers/cvtsudoers.c:268
-#: plugins/sudoers/logging.c:1029
+#: plugins/sudoers/logging.c:1033
 #, c-format
 msgid "unable to open log file %s"
 msgstr ""
@@ -1039,49 +1018,49 @@ msgstr ""
 msgid "unable to initialize relay TLS context"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:146 logsrvd/logsrvd_journal.c:421
-#: logsrvd/logsrvd_journal.c:426
+#: logsrvd/logsrvd_journal.c:149 logsrvd/logsrvd_journal.c:424
+#: logsrvd/logsrvd_journal.c:429
 msgid "unable to create journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:150 logsrvd/logsrvd_queue.c:109
-#: plugins/sudoers/visudo.c:1026
+#: logsrvd/logsrvd_journal.c:153 logsrvd/logsrvd_queue.c:109
+#: plugins/sudoers/visudo.c:1028
 #, c-format
 msgid "unable to lock %s"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:153
+#: logsrvd/logsrvd_journal.c:156
 msgid "unable to lock journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:161
+#: logsrvd/logsrvd_journal.c:164
 msgid "unable to open journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:182 logsrvd/logsrvd_journal.c:457
-#: logsrvd/logsrvd_journal.c:462
+#: logsrvd/logsrvd_journal.c:185 logsrvd/logsrvd_journal.c:460
+#: logsrvd/logsrvd_journal.c:465
 msgid "unable to write journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:190 logsrvd/logsrvd_journal.c:197
+#: logsrvd/logsrvd_journal.c:193 logsrvd/logsrvd_journal.c:200
 msgid "unable to rename journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:244 logsrvd/logsrvd_journal.c:245
-#: logsrvd/logsrvd_journal.c:279 logsrvd/logsrvd_journal.c:280
+#: logsrvd/logsrvd_journal.c:247 logsrvd/logsrvd_journal.c:248
+#: logsrvd/logsrvd_journal.c:282 logsrvd/logsrvd_journal.c:283
 msgid "unexpected EOF reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:248 logsrvd/logsrvd_journal.c:249
-#: logsrvd/logsrvd_journal.c:283 logsrvd/logsrvd_journal.c:284
+#: logsrvd/logsrvd_journal.c:251 logsrvd/logsrvd_journal.c:252
+#: logsrvd/logsrvd_journal.c:286 logsrvd/logsrvd_journal.c:287
 msgid "error reading journal file"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:295 logsrvd/logsrvd_journal.c:381
+#: logsrvd/logsrvd_journal.c:298 logsrvd/logsrvd_journal.c:384
 msgid "invalid journal file, unable to restart"
 msgstr ""
 
-#: logsrvd/logsrvd_journal.c:440
+#: logsrvd/logsrvd_journal.c:443
 #, c-format
 msgid "unable to seek to [%lld, %ld] in journal file %s"
 msgstr ""
@@ -1139,7 +1118,7 @@ msgstr ""
 
 #: logsrvd/logsrvd_local.c:599 logsrvd/logsrvd_local.c:607
 #: logsrvd/logsrvd_local.c:655 logsrvd/logsrvd_local.c:690
-#: plugins/sudoers/sudoreplay.c:351
+#: plugins/sudoers/sudoreplay.c:344
 #, c-format
 msgid "%s/%s: %s"
 msgstr ""
@@ -1174,7 +1153,7 @@ msgid "%s: invalid ServerHello, missing server_id"
 msgstr ""
 
 #: logsrvd/logsrvd_relay.c:520 logsrvd/sendlog.c:1096
-#: plugins/sudoers/log_client.c:1469
+#: plugins/sudoers/log_client.c:1468
 msgid "invalid ServerHello"
 msgstr ""
 
@@ -1287,35 +1266,35 @@ msgstr ""
 msgid "unable to get server IP addr"
 msgstr ""
 
-#: logsrvd/sendlog.c:300 plugins/sudoers/sudoreplay.c:871
+#: logsrvd/sendlog.c:300 plugins/sudoers/sudoreplay.c:868
 #, c-format
 msgid "unable to read %s/%s: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1020 plugins/sudoers/iolog.c:951
-#: plugins/sudoers/iolog.c:1026
+#: logsrvd/sendlog.c:1020 plugins/sudoers/iolog.c:949
+#: plugins/sudoers/iolog.c:1024
 #, c-format
 msgid "unexpected I/O event %d"
 msgstr ""
 
 #: logsrvd/sendlog.c:1073 logsrvd/sendlog.c:1090 logsrvd/sendlog.c:1124
-#: plugins/sudoers/log_client.c:1118 plugins/sudoers/log_client.c:1395
-#: plugins/sudoers/log_client.c:1463 plugins/sudoers/log_client.c:1502
+#: plugins/sudoers/log_client.c:1118 plugins/sudoers/log_client.c:1394
+#: plugins/sudoers/log_client.c:1462 plugins/sudoers/log_client.c:1501
 #, c-format
 msgid "%s: unexpected state %d"
 msgstr ""
 
-#: logsrvd/sendlog.c:1160 plugins/sudoers/log_client.c:1551
+#: logsrvd/sendlog.c:1160 plugins/sudoers/log_client.c:1550
 #, c-format
 msgid "error message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1173 plugins/sudoers/log_client.c:1564
+#: logsrvd/sendlog.c:1173 plugins/sudoers/log_client.c:1563
 #, c-format
 msgid "abort message received from server: %s"
 msgstr ""
 
-#: logsrvd/sendlog.c:1232 plugins/sudoers/log_client.c:1614
+#: logsrvd/sendlog.c:1232 plugins/sudoers/log_client.c:1613
 #, c-format
 msgid "%s: unexpected type_case value %d"
 msgstr ""
@@ -1324,7 +1303,7 @@ msgstr ""
 msgid "timeout reading from server"
 msgstr ""
 
-#: logsrvd/sendlog.c:1310 plugins/sudoers/log_client.c:1730
+#: logsrvd/sendlog.c:1310 plugins/sudoers/log_client.c:1729
 msgid "host name does not match certificate"
 msgstr ""
 
@@ -1332,7 +1311,7 @@ msgstr ""
 msgid "premature EOF"
 msgstr ""
 
-#: logsrvd/sendlog.c:1356 plugins/sudoers/log_client.c:1777
+#: logsrvd/sendlog.c:1356 plugins/sudoers/log_client.c:1776
 #, c-format
 msgid "server message too large: %u"
 msgstr ""
@@ -1419,10 +1398,10 @@ msgstr ""
 
 #: plugins/sudoers/audit.c:269 plugins/sudoers/audit.c:429
 #: plugins/sudoers/log_client.c:951 plugins/sudoers/log_client.c:1000
-#: plugins/sudoers/log_client.c:1049 plugins/sudoers/log_client.c:1175
-#: plugins/sudoers/logging.c:591 plugins/sudoers/logging.c:689
-#: plugins/sudoers/logging.c:792 plugins/sudoers/logging.c:983
-#: plugins/sudoers/policy.c:124
+#: plugins/sudoers/log_client.c:1049 plugins/sudoers/log_client.c:1174
+#: plugins/sudoers/logging.c:595 plugins/sudoers/logging.c:693
+#: plugins/sudoers/logging.c:796 plugins/sudoers/logging.c:987
+#: plugins/sudoers/policy.c:125
 msgid "unable to get time of day"
 msgstr ""
 
@@ -1576,11 +1555,11 @@ msgstr ""
 msgid "User ID locked for SecurID Authentication"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:119 plugins/sudoers/auth/securid5.c:170
+#: plugins/sudoers/auth/securid5.c:119 plugins/sudoers/auth/securid5.c:171
 msgid "invalid username length for SecurID"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:123 plugins/sudoers/auth/securid5.c:175
+#: plugins/sudoers/auth/securid5.c:123 plugins/sudoers/auth/securid5.c:176
 msgid "invalid Authentication Handle for SecurID"
 msgstr ""
 
@@ -1588,11 +1567,11 @@ msgstr ""
 msgid "SecurID communication failed"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:131 plugins/sudoers/auth/securid5.c:218
+#: plugins/sudoers/auth/securid5.c:131 plugins/sudoers/auth/securid5.c:219
 msgid "unknown SecurID error"
 msgstr ""
 
-#: plugins/sudoers/auth/securid5.c:165
+#: plugins/sudoers/auth/securid5.c:166
 msgid "invalid passcode length for SecurID"
 msgstr ""
 
@@ -1658,9 +1637,15 @@ msgid ""
 "\n"
 msgstr ""
 
-#: plugins/sudoers/check.c:348 plugins/sudoers/check.c:358
-#: plugins/sudoers/parse.c:64 plugins/sudoers/sudoers.c:920
-#: plugins/sudoers/sudoers.c:941 plugins/sudoers/tsdump.c:119
+#: plugins/sudoers/check.c:309
+msgid ""
+"For security reasons, the password you type will not be visible.\n"
+"\n"
+msgstr ""
+
+#: plugins/sudoers/check.c:353 plugins/sudoers/check.c:363
+#: plugins/sudoers/parse.c:82 plugins/sudoers/sudoers.c:945
+#: plugins/sudoers/sudoers.c:966 plugins/sudoers/tsdump.c:119
 #, c-format
 msgid "unknown uid %u"
 msgstr ""
@@ -1717,8 +1702,7 @@ msgstr ""
 
 #: plugins/sudoers/cvtsudoers.c:399 plugins/sudoers/sudoers.c:166
 #: plugins/sudoers/sudoers.c:222 plugins/sudoers/testsudoers.c:254
-#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:650
-#: plugins/sudoers/visudo.c:975
+#: plugins/sudoers/visudo.c:280 plugins/sudoers/visudo.c:654
 msgid "unable to initialize sudoers default values"
 msgstr ""
 
@@ -1747,12 +1731,12 @@ msgstr ""
 msgid "invalid filter: %s"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:754 plugins/sudoers/visudo.c:980
+#: plugins/sudoers/cvtsudoers.c:754 plugins/sudoers/visudo.c:982
 #, c-format
 msgid "failed to parse %s file, unknown error"
 msgstr ""
 
-#: plugins/sudoers/cvtsudoers.c:1478 plugins/sudoers/sudoreplay.c:1145
+#: plugins/sudoers/cvtsudoers.c:1478 plugins/sudoers/sudoreplay.c:1142
 #: plugins/sudoers/timestamp.c:343 plugins/sudoers/timestamp.c:346
 #, c-format
 msgid "unable to write to %s"
@@ -1787,17 +1771,36 @@ msgid ""
 "  -V, --version              display version information and exit"
 msgstr ""
 
+#: plugins/sudoers/cvtsudoers_csv.c:192 plugins/sudoers/cvtsudoers_csv.c:199
+#: plugins/sudoers/cvtsudoers_ldif.c:244 plugins/sudoers/cvtsudoers_ldif.c:251
+#: plugins/sudoers/cvtsudoers_ldif.c:592 plugins/sudoers/env.c:340
+#: plugins/sudoers/env.c:347 plugins/sudoers/env.c:458
+#: plugins/sudoers/ldap.c:528 plugins/sudoers/ldap.c:761
+#: plugins/sudoers/ldap.c:1134 plugins/sudoers/ldap_conf.c:222
+#: plugins/sudoers/ldap_conf.c:313 plugins/sudoers/ldap_util.c:486
+#: plugins/sudoers/linux_audit.c:92 plugins/sudoers/logging.c:461
+#: plugins/sudoers/logging.c:817 plugins/sudoers/logging.c:827
+#: plugins/sudoers/policy.c:807 plugins/sudoers/policy.c:818
+#: plugins/sudoers/prompt.c:168 plugins/sudoers/serialize_list.c:62
+#: plugins/sudoers/serialize_list.c:71 plugins/sudoers/strvec_join.c:62
+#: plugins/sudoers/sudoreplay.c:1339 plugins/sudoers/sudoreplay.c:1345
+#: plugins/sudoers/sudoreplay.c:1351 plugins/sudoers/testsudoers.c:245
+#: plugins/sudoers/toke_util.c:213 toke.l:995 toke.l:1197
+#, c-format
+msgid "internal error, %s overflow"
+msgstr ""
+
 #: plugins/sudoers/cvtsudoers_csv.c:452 plugins/sudoers/cvtsudoers_csv.c:466
 #: plugins/sudoers/cvtsudoers_json.c:657 plugins/sudoers/cvtsudoers_json.c:672
 #: plugins/sudoers/cvtsudoers_ldif.c:347 plugins/sudoers/cvtsudoers_ldif.c:360
-#: plugins/sudoers/ldap.c:510
+#: plugins/sudoers/ldap.c:512
 msgid "unable to get GMT time"
 msgstr ""
 
 #: plugins/sudoers/cvtsudoers_csv.c:457 plugins/sudoers/cvtsudoers_csv.c:471
 #: plugins/sudoers/cvtsudoers_json.c:662 plugins/sudoers/cvtsudoers_json.c:677
 #: plugins/sudoers/cvtsudoers_ldif.c:352 plugins/sudoers/cvtsudoers_ldif.c:365
-#: plugins/sudoers/ldap.c:518
+#: plugins/sudoers/ldap.c:520
 msgid "unable to format timestamp"
 msgstr ""
 
@@ -2627,8 +2630,8 @@ msgstr ""
 msgid "value \"%s\" is invalid for option \"%s\""
 msgstr ""
 
-#: plugins/sudoers/defaults.c:1128 plugins/sudoers/policy.c:208
-#: plugins/sudoers/policy.c:217
+#: plugins/sudoers/defaults.c:1128 plugins/sudoers/policy.c:210
+#: plugins/sudoers/policy.c:219
 #, c-format
 msgid "path name for \"%s\" too long"
 msgstr ""
@@ -2643,15 +2646,24 @@ msgstr ""
 msgid "values for \"%s\" must start with a '/'"
 msgstr ""
 
+#: plugins/sudoers/editor.c:180
+#, c-format
+msgid "ignoring editor: %.*s"
+msgstr ""
+
+#: plugins/sudoers/editor.c:181
+msgid "editor arguments may not contain \"--\""
+msgstr ""
+
 #: plugins/sudoers/env.c:426
 msgid "sudo_putenv: corrupted envp, length mismatch"
 msgstr ""
 
-#: plugins/sudoers/env.c:1109
+#: plugins/sudoers/env.c:1113
 msgid "unable to rebuild the environment"
 msgstr ""
 
-#: plugins/sudoers/env.c:1183
+#: plugins/sudoers/env.c:1192
 #, c-format
 msgid ""
 "sorry, you are not allowed to set the following environment variables: %s"
@@ -2667,27 +2679,17 @@ msgstr ""
 msgid "%s: read error"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:169
-#, c-format
-msgid "%s must be owned by uid %d"
-msgstr ""
-
-#: plugins/sudoers/group_plugin.c:173
-#, c-format
-msgid "%s must only be writable by owner"
-msgstr ""
-
-#: plugins/sudoers/group_plugin.c:185 plugins/sudoers/sssd.c:576
+#: plugins/sudoers/group_plugin.c:169 plugins/sudoers/sssd.c:576
 #, c-format
 msgid "unable to load %s: %s"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:197
+#: plugins/sudoers/group_plugin.c:181
 #, c-format
 msgid "unable to find symbol \"group_plugin\" in %s"
 msgstr ""
 
-#: plugins/sudoers/group_plugin.c:202
+#: plugins/sudoers/group_plugin.c:186
 #, c-format
 msgid "%s: incompatible group plugin major version %d, expected %d"
 msgstr ""
@@ -2710,10 +2712,10 @@ msgstr ""
 msgid "unable to update sequence file"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:719 plugins/sudoers/iolog.c:909
-#: plugins/sudoers/iolog.c:1071 plugins/sudoers/iolog.c:1078
-#: plugins/sudoers/iolog.c:1199 plugins/sudoers/iolog.c:1206
-#: plugins/sudoers/iolog.c:1305 plugins/sudoers/iolog.c:1312
+#: plugins/sudoers/iolog.c:719 plugins/sudoers/iolog.c:907
+#: plugins/sudoers/iolog.c:1069 plugins/sudoers/iolog.c:1076
+#: plugins/sudoers/iolog.c:1197 plugins/sudoers/iolog.c:1204
+#: plugins/sudoers/iolog.c:1303 plugins/sudoers/iolog.c:1310
 #, c-format
 msgid "unable to write to I/O log file: %s"
 msgstr ""
@@ -2723,20 +2725,20 @@ msgstr ""
 msgid "unable to create %s/%s"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:957
+#: plugins/sudoers/iolog.c:955
 #, c-format
 msgid "%s: internal error, I/O log file for event %d not open"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1056 plugins/sudoers/iolog.c:1184
-#: plugins/sudoers/iolog.c:1289 plugins/sudoers/timestamp.c:879
-#: plugins/sudoers/timestamp.c:971 plugins/sudoers/visudo.c:552
-#: plugins/sudoers/visudo.c:558
+#: plugins/sudoers/iolog.c:1054 plugins/sudoers/iolog.c:1182
+#: plugins/sudoers/iolog.c:1287 plugins/sudoers/timestamp.c:879
+#: plugins/sudoers/timestamp.c:971 plugins/sudoers/visudo.c:556
+#: plugins/sudoers/visudo.c:562
 msgid "unable to read the clock"
 msgstr ""
 
-#: plugins/sudoers/iolog.c:1281 plugins/sudoers/log_client.c:1193
-#: plugins/sudoers/log_client.c:1203 plugins/sudoers/log_client.c:1207
+#: plugins/sudoers/iolog.c:1279 plugins/sudoers/log_client.c:1192
+#: plugins/sudoers/log_client.c:1202 plugins/sudoers/log_client.c:1206
 #, c-format
 msgid "%s: internal error, invalid signal %d"
 msgstr ""
@@ -2755,18 +2757,18 @@ msgstr ""
 msgid "you must set TLS_CERT in %s to use SSL"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1712
+#: plugins/sudoers/ldap.c:1714
 #, c-format
 msgid "unable to initialize LDAP: %s"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1749
+#: plugins/sudoers/ldap.c:1751
 msgid ""
 "start_tls specified but LDAP libs do not support ldap_start_tls_s() or "
 "ldap_start_tls_s_np()"
 msgstr ""
 
-#: plugins/sudoers/ldap.c:1886 plugins/sudoers/parse_ldif.c:748
+#: plugins/sudoers/ldap.c:1888 plugins/sudoers/parse_ldif.c:748
 #, c-format
 msgid "invalid sudoOrder attribute: %s"
 msgstr ""
@@ -2807,7 +2809,7 @@ msgid "unable to send audit message"
 msgstr ""
 
 #: plugins/sudoers/log_client.c:125 plugins/sudoers/log_client.c:412
-#: plugins/sudoers/log_client.c:1440 plugins/sudoers/log_client.c:2056
+#: plugins/sudoers/log_client.c:1439 plugins/sudoers/log_client.c:2055
 msgid "error in event loop"
 msgstr ""
 
@@ -2849,20 +2851,20 @@ msgstr ""
 msgid "TLS handshake was unsuccessful"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1211
+#: plugins/sudoers/log_client.c:1210
 #, c-format
 msgid "%s: internal error, invalid exit status %d"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1740 plugins/sudoers/log_client.c:1764
+#: plugins/sudoers/log_client.c:1739 plugins/sudoers/log_client.c:1763
 msgid "lost connection to log server"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1841
+#: plugins/sudoers/log_client.c:1840
 msgid "missing write buffer"
 msgstr ""
 
-#: plugins/sudoers/log_client.c:1995
+#: plugins/sudoers/log_client.c:1994
 msgid "unable to connect to log server"
 msgstr ""
 
@@ -2902,46 +2904,46 @@ msgstr ""
 msgid "This incident has been reported to the administrator.\n"
 msgstr ""
 
-#: plugins/sudoers/logging.c:365 plugins/sudoers/sudoers.c:648
-#: plugins/sudoers/sudoers.c:650 plugins/sudoers/sudoers.c:652
-#: plugins/sudoers/sudoers.c:654 plugins/sudoers/sudoers.c:805
-#: plugins/sudoers/sudoers.c:807
+#: plugins/sudoers/logging.c:369 plugins/sudoers/sudoers.c:655
+#: plugins/sudoers/sudoers.c:657 plugins/sudoers/sudoers.c:659
+#: plugins/sudoers/sudoers.c:661 plugins/sudoers/sudoers.c:816
+#: plugins/sudoers/sudoers.c:818
 #, c-format
 msgid "%s: command not found"
 msgstr ""
 
-#: plugins/sudoers/logging.c:367 plugins/sudoers/sudoers.c:644
+#: plugins/sudoers/logging.c:371 plugins/sudoers/sudoers.c:651
 #, c-format
 msgid ""
 "ignoring \"%s\" found in '.'\n"
 "Use \"sudo ./%s\" if this is the \"%s\" you wish to run."
 msgstr ""
 
-#: plugins/sudoers/logging.c:387
+#: plugins/sudoers/logging.c:391
 #, c-format
 msgid "%u incorrect password attempt"
 msgid_plural "%u incorrect password attempts"
 msgstr[0] ""
 msgstr[1] ""
 
-#: plugins/sudoers/logging.c:477
+#: plugins/sudoers/logging.c:481
 msgid "authentication failure"
 msgstr ""
 
-#: plugins/sudoers/logging.c:516 plugins/sudoers/logging.c:535
+#: plugins/sudoers/logging.c:520 plugins/sudoers/logging.c:539
 msgid "a password is required"
 msgstr ""
 
-#: plugins/sudoers/logging.c:799 plugins/sudoers/logging.c:811
+#: plugins/sudoers/logging.c:803 plugins/sudoers/logging.c:815
 msgid "problem parsing sudoers"
 msgstr ""
 
-#: plugins/sudoers/logging.c:873 plugins/sudoers/logging.c:885
+#: plugins/sudoers/logging.c:877 plugins/sudoers/logging.c:889
 #, c-format
 msgid "%s:%d:%d: %s"
 msgstr ""
 
-#: plugins/sudoers/logging.c:1062
+#: plugins/sudoers/logging.c:1066
 #, c-format
 msgid "unable to write log file: %s"
 msgstr ""
@@ -2956,51 +2958,51 @@ msgstr ""
 msgid "digest for %s (%s) is not in %s form"
 msgstr ""
 
-#: plugins/sudoers/parse.c:591
+#: plugins/sudoers/parse.c:631
 #, c-format
 msgid ""
 "\n"
 "LDAP Role: %s\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:594
+#: plugins/sudoers/parse.c:634
 msgid ""
 "\n"
 "Sudoers entry:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:596
+#: plugins/sudoers/parse.c:636
 msgid "    RunAsUsers: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:611
+#: plugins/sudoers/parse.c:651
 msgid "    RunAsGroups: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:621
+#: plugins/sudoers/parse.c:661
 msgid "    Options: "
 msgstr ""
 
-#: plugins/sudoers/parse.c:685
+#: plugins/sudoers/parse.c:725
 msgid "    Commands:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:876
+#: plugins/sudoers/parse.c:916
 #, c-format
 msgid "Matching Defaults entries for %s on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:894
+#: plugins/sudoers/parse.c:934
 #, c-format
 msgid "Runas and Command-specific defaults for %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:912
+#: plugins/sudoers/parse.c:952
 #, c-format
 msgid "User %s may run the following commands on %s:\n"
 msgstr ""
 
-#: plugins/sudoers/parse.c:927
+#: plugins/sudoers/parse.c:967
 #, c-format
 msgid "User %s is not allowed to run sudo on %s.\n"
 msgstr ""
@@ -3015,91 +3017,91 @@ msgstr ""
 msgid "invalid LDIF attribute: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:81 plugins/sudoers/policy.c:112
+#: plugins/sudoers/policy.c:82 plugins/sudoers/policy.c:113
 #, c-format
 msgid "invalid %.*s set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:358 plugins/sudoers/testsudoers.c:268
+#: plugins/sudoers/policy.c:360 plugins/sudoers/testsudoers.c:268
 msgid "unable to parse network address list"
 msgstr ""
 
-#: plugins/sudoers/policy.c:526
+#: plugins/sudoers/policy.c:528
 msgid "user name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:530
+#: plugins/sudoers/policy.c:532
 msgid "user-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:534
+#: plugins/sudoers/policy.c:536
 msgid "group-ID not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:538
+#: plugins/sudoers/policy.c:540
 msgid "host name not set by sudo front-end"
 msgstr ""
 
-#: plugins/sudoers/policy.c:730
+#: plugins/sudoers/policy.c:737
 #, c-format
 msgid "invalid working directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:914
+#: plugins/sudoers/policy.c:921
 #, c-format
 msgid "invalid chroot directory: %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1101 plugins/sudoers/visudo.c:259
-#: plugins/sudoers/visudo.c:902
+#: plugins/sudoers/policy.c:1108 plugins/sudoers/visudo.c:259
+#: plugins/sudoers/visudo.c:906
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1171 plugins/sudoers/policy.c:1208
-#: plugins/sudoers/policy.c:1230 plugins/sudoers/policy.c:1256
+#: plugins/sudoers/policy.c:1178 plugins/sudoers/policy.c:1215
+#: plugins/sudoers/policy.c:1237 plugins/sudoers/policy.c:1263
 #, c-format
 msgid "%s: invalid mode flags from sudo front end: 0x%x"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1292
+#: plugins/sudoers/policy.c:1299
 #, c-format
 msgid "Sudoers policy plugin version %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1294
+#: plugins/sudoers/policy.c:1301
 #, c-format
 msgid "Sudoers file grammar version %d\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1298
+#: plugins/sudoers/policy.c:1305
 #, c-format
 msgid ""
 "\n"
 "Sudoers path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1301
+#: plugins/sudoers/policy.c:1308
 #, c-format
 msgid "nsswitch path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1303
+#: plugins/sudoers/policy.c:1310
 #, c-format
 msgid "ldap.conf path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1304
+#: plugins/sudoers/policy.c:1311
 #, c-format
 msgid "ldap.secret path: %s\n"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1337
+#: plugins/sudoers/policy.c:1344
 #, c-format
 msgid "unable to register hook of type %d (version %d.%d)"
 msgstr ""
 
-#: plugins/sudoers/policy.c:1355
+#: plugins/sudoers/policy.c:1362
 #, c-format
 msgid "unable to deregister hook of type %d (version %d.%d)"
 msgstr ""
@@ -3146,24 +3148,24 @@ msgstr ""
 msgid "unable to cache group %s, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:880 plugins/sudoers/pwutil.c:931
-#: plugins/sudoers/pwutil.c:981 plugins/sudoers/pwutil.c:1033
+#: plugins/sudoers/pwutil.c:880 plugins/sudoers/pwutil.c:963
+#: plugins/sudoers/pwutil.c:1017 plugins/sudoers/pwutil.c:1071
 #, c-format
 msgid "unable to cache group list for %s, already exists"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:886 plugins/sudoers/pwutil.c:936
-#: plugins/sudoers/pwutil.c:987 plugins/sudoers/pwutil.c:1038
+#: plugins/sudoers/pwutil.c:886 plugins/sudoers/pwutil.c:968
+#: plugins/sudoers/pwutil.c:1023 plugins/sudoers/pwutil.c:1076
 #, c-format
 msgid "unable to cache group list for %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:925
+#: plugins/sudoers/pwutil.c:957
 #, c-format
 msgid "unable to parse groups for %s"
 msgstr ""
 
-#: plugins/sudoers/pwutil.c:1027
+#: plugins/sudoers/pwutil.c:1065
 #, c-format
 msgid "unable to parse gids for %s"
 msgstr ""
@@ -3275,220 +3277,224 @@ msgstr ""
 msgid "sudoers specifies that root is not allowed to sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:476
+#: plugins/sudoers/sudoers.c:483
 msgid "user not allowed to override closefrom limit"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:477
+#: plugins/sudoers/sudoers.c:484
 msgid "you are not permitted to use the -C option"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:537
+#: plugins/sudoers/sudoers.c:544
 #, c-format
 msgid "timestamp owner (%s): No such user"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:552
+#: plugins/sudoers/sudoers.c:559
 msgid "no tty"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:553
+#: plugins/sudoers/sudoers.c:560
 msgid "sorry, you must have a tty to run sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:560
+#: plugins/sudoers/sudoers.c:567
 #, c-format
 msgid "invalid shell for user %s: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:643
+#: plugins/sudoers/sudoers.c:650
 msgid "command in current directory"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:658
+#: plugins/sudoers/sudoers.c:665
 msgid "\"cd\" is a shell built-in command, it cannot be run directly."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:660
+#: plugins/sudoers/sudoers.c:667
 msgid "the -s option may be used to run a privileged shell."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:662
+#: plugins/sudoers/sudoers.c:669
 msgid "the -D option may be used to run a command in a specific directory."
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:671
+#: plugins/sudoers/sudoers.c:678
 msgid "user not allowed to set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:673
+#: plugins/sudoers/sudoers.c:680
 msgid "sorry, you are not allowed set a command timeout"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:681
+#: plugins/sudoers/sudoers.c:688
 msgid "user not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:683
+#: plugins/sudoers/sudoers.c:690
 msgid "sorry, you are not allowed to preserve the environment"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1073
+#: plugins/sudoers/sudoers.c:799
+msgid "error setting user-specified environment variables"
+msgstr ""
+
+#: plugins/sudoers/sudoers.c:1112
 msgid "sudoedit doesn't need to be run via sudo"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1118 plugins/sudoers/sudoreplay.c:1584
+#: plugins/sudoers/sudoers.c:1157 plugins/sudoers/sudoreplay.c:1612
 #: plugins/sudoers/tsdump.c:138
 #, c-format
 msgid "unable to read %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1147 plugins/sudoers/visudo.c:1064
+#: plugins/sudoers/sudoers.c:1186 plugins/sudoers/visudo.c:1066
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1151 plugins/sudoers/timestamp.c:263 toke.l:1247
+#: plugins/sudoers/sudoers.c:1190 plugins/sudoers/timestamp.c:263 toke.l:1255
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1155 plugins/sudoers/timestamp.c:270 toke.l:1252
+#: plugins/sudoers/sudoers.c:1194 plugins/sudoers/timestamp.c:270 toke.l:1260
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1159 plugins/sudoers/timestamp.c:275 toke.l:1255
+#: plugins/sudoers/sudoers.c:1198 plugins/sudoers/timestamp.c:275 toke.l:1263
 #, c-format
 msgid "%s is owned by gid %u, should be %u"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1194
+#: plugins/sudoers/sudoers.c:1233
 #, c-format
 msgid "only root can use \"-c %s\""
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1213
+#: plugins/sudoers/sudoers.c:1252
 #, c-format
 msgid "unknown login class %s"
 msgstr ""
 
-#: plugins/sudoers/sudoers.c:1300 plugins/sudoers/sudoers.c:1315
+#: plugins/sudoers/sudoers.c:1339 plugins/sudoers/sudoers.c:1354
 #, c-format
 msgid "unable to resolve host %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:259
+#: plugins/sudoers/sudoreplay.c:252
 #, c-format
 msgid "invalid filter option: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:275
+#: plugins/sudoers/sudoreplay.c:268
 #, c-format
 msgid "invalid max wait: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:298
+#: plugins/sudoers/sudoreplay.c:291
 #, c-format
 msgid "invalid speed factor: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:333
+#: plugins/sudoers/sudoreplay.c:326
 #, c-format
 msgid "invalid time offset %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:342
+#: plugins/sudoers/sudoreplay.c:335
 #, c-format
 msgid "%s/%.2s/%.2s/%.2s: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:347
+#: plugins/sudoers/sudoreplay.c:340
 #, c-format
 msgid "%s/timing: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:375
+#: plugins/sudoers/sudoreplay.c:368
 #, c-format
 msgid "Replaying sudo session: %s"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:637
+#: plugins/sudoers/sudoreplay.c:634
 msgid "unable to set tty to raw mode"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:688
+#: plugins/sudoers/sudoreplay.c:685
 msgid "Warning: your terminal is too small to properly replay the log.\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:689
+#: plugins/sudoers/sudoreplay.c:686
 #, c-format
 msgid "Log geometry is %d x %d, your terminal's geometry is %d x %d."
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:717
+#: plugins/sudoers/sudoreplay.c:714
 msgid "Replay finished, press any key to restore the terminal."
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1219 plugins/sudoers/sudoreplay.c:1249
+#: plugins/sudoers/sudoreplay.c:1216 plugins/sudoers/sudoreplay.c:1246
 #, c-format
 msgid "ambiguous expression \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1271
+#: plugins/sudoers/sudoreplay.c:1268
 msgid "unmatched ')' in expression"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1275
+#: plugins/sudoers/sudoreplay.c:1272
 #, c-format
 msgid "unknown search term \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1290
+#: plugins/sudoers/sudoreplay.c:1287
 #, c-format
 msgid "%s requires an argument"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1300
+#: plugins/sudoers/sudoreplay.c:1297
 #, c-format
 msgid "could not parse date \"%s\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1309
+#: plugins/sudoers/sudoreplay.c:1306
 msgid "unmatched '(' in expression"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1311
+#: plugins/sudoers/sudoreplay.c:1308
 msgid "illegal trailing \"or\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1313
+#: plugins/sudoers/sudoreplay.c:1310
 msgid "illegal trailing \"!\""
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1371
+#: plugins/sudoers/sudoreplay.c:1416
 #, c-format
 msgid "unknown search type %d"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1650
+#: plugins/sudoers/sudoreplay.c:1678
 #, c-format
 msgid "usage: %s [-hnRS] [-d dir] [-m num] [-s num] ID\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1652
+#: plugins/sudoers/sudoreplay.c:1680
 #, c-format
 msgid "usage: %s [-h] [-d dir] -l [search expression]\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1666
+#: plugins/sudoers/sudoreplay.c:1694
 #, c-format
 msgid ""
 "%s - replay sudo session logs\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/sudoreplay.c:1668
+#: plugins/sudoers/sudoreplay.c:1696
 msgid ""
 "\n"
 "Options:\n"
@@ -3558,7 +3564,7 @@ msgstr ""
 msgid "please consider using the cvtsudoers utility instead"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:311 plugins/sudoers/visudo.c:698
+#: plugins/sudoers/visudo.c:311 plugins/sudoers/visudo.c:702
 #, c-format
 msgid "press return to edit %s: "
 msgstr ""
@@ -3568,81 +3574,81 @@ msgstr ""
 msgid "contents of edit session left in %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:402
+#: plugins/sudoers/visudo.c:403
 #, c-format
 msgid "specified editor (%s) doesn't exist"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:404
+#: plugins/sudoers/visudo.c:408
 #, c-format
 msgid "no editor found (editor path = %s)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:491 plugins/sudoers/visudo.c:770
+#: plugins/sudoers/visudo.c:495 plugins/sudoers/visudo.c:774
 #, c-format
 msgid "unable to stat %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:511 plugins/sudoers/visudo.c:519
+#: plugins/sudoers/visudo.c:515 plugins/sudoers/visudo.c:523
 msgid "write error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:565
+#: plugins/sudoers/visudo.c:569
 #, c-format
 msgid "unable to stat temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:572
+#: plugins/sudoers/visudo.c:576
 #, c-format
 msgid "zero length temporary file (%s), %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:578
+#: plugins/sudoers/visudo.c:582
 #, c-format
 msgid "editor (%s) failed, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:600
+#: plugins/sudoers/visudo.c:604
 #, c-format
 msgid "%s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:645
+#: plugins/sudoers/visudo.c:649
 #, c-format
 msgid "unable to re-open temporary file (%s), %s unchanged."
 msgstr ""
 
-#: plugins/sudoers/visudo.c:658
+#: plugins/sudoers/visudo.c:662
 #, c-format
 msgid "unable to parse temporary file (%s), unknown error"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:744 plugins/sudoers/visudo.c:774
-#: plugins/sudoers/visudo.c:781
+#: plugins/sudoers/visudo.c:748 plugins/sudoers/visudo.c:778
+#: plugins/sudoers/visudo.c:785
 #, c-format
 msgid "unable to set (uid, gid) of %s to (%u, %u)"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:809
+#: plugins/sudoers/visudo.c:813
 #, c-format
 msgid "%s and %s not on the same file system, using mv to rename"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:820
+#: plugins/sudoers/visudo.c:824
 #, c-format
 msgid "command failed: '%s %s %s', %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:827
+#: plugins/sudoers/visudo.c:831
 #, c-format
 msgid "error renaming %s, %s unchanged"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:847
+#: plugins/sudoers/visudo.c:851
 msgid "What now? "
 msgstr ""
 
-#: plugins/sudoers/visudo.c:861
+#: plugins/sudoers/visudo.c:865
 msgid ""
 "Options are:\n"
 "  (e)dit sudoers file again\n"
@@ -3650,48 +3656,48 @@ msgid ""
 "  (Q)uit and save changes to sudoers file (DANGER!)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:907
+#: plugins/sudoers/visudo.c:911
 #, c-format
 msgid "unable to run %s"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:938
+#: plugins/sudoers/visudo.c:942
 #, c-format
 msgid "%s: wrong owner (uid, gid) should be (%u, %u)\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:949
+#: plugins/sudoers/visudo.c:953
 #, c-format
 msgid "%s: bad permissions, should be mode 0%o\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:997 plugins/sudoers/visudo.c:1004
+#: plugins/sudoers/visudo.c:999 plugins/sudoers/visudo.c:1006
 #, c-format
 msgid "%s: parsed OK\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1023
+#: plugins/sudoers/visudo.c:1025
 #, c-format
 msgid "%s busy, try again later"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1027
+#: plugins/sudoers/visudo.c:1029
 msgid "Edit anyway? [y/N]"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1128
+#: plugins/sudoers/visudo.c:1130
 #, c-format
 msgid "Warning: %s:%d:%d: unused %s \"%s\""
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1240
+#: plugins/sudoers/visudo.c:1242
 #, c-format
 msgid ""
 "%s - safely edit the sudoers file\n"
 "\n"
 msgstr ""
 
-#: plugins/sudoers/visudo.c:1242
+#: plugins/sudoers/visudo.c:1244
 msgid ""
 "\n"
 "Options:\n"
@@ -3728,10 +3734,10 @@ msgstr ""
 msgid "invalid IPv6 address"
 msgstr ""
 
-#: toke.l:868
+#: toke.l:876
 msgid "unexpected line break in string"
 msgstr ""
 
-#: toke.l:1218
+#: toke.l:1226
 msgid "too many levels of includes"
 msgstr ""
diff --git a/po/sudo.pot b/po/sudo.pot
index cc7a6307f..58a85cae2 100644
--- a/po/sudo.pot
+++ b/po/sudo.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: sudo 1.9.12\n"
+"Project-Id-Version: sudo 1.9.13\n"
 "Report-Msgid-Bugs-To: https://bugzilla.sudo.ws\n"
-"POT-Creation-Date: 2022-10-09 09:48-0600\n"
+"POT-Creation-Date: 2023-01-24 13:11-0700\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -30,74 +30,74 @@ msgid "unable to restore registry"
 msgstr ""
 
 #: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/gidlist.c:76
-#: lib/util/json.c:54 lib/util/json.c:183 lib/util/sudo_conf.c:219
-#: lib/util/sudo_conf.c:305 lib/util/sudo_conf.c:382 lib/util/sudo_conf.c:666
+#: lib/util/json.c:55 lib/util/json.c:197 lib/util/sudo_conf.c:215
+#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:646
 #: src/conversation.c:80 src/exec_iolog.c:124 src/exec_iolog.c:135
-#: src/exec_iolog.c:212 src/exec_monitor.c:205 src/exec_monitor.c:458
-#: src/exec_monitor.c:464 src/exec_monitor.c:472 src/exec_monitor.c:480
-#: src/exec_monitor.c:487 src/exec_monitor.c:494 src/exec_monitor.c:501
-#: src/exec_monitor.c:508 src/exec_monitor.c:515 src/exec_monitor.c:522
-#: src/exec_monitor.c:529 src/exec_nopty.c:227 src/exec_nopty.c:236
-#: src/exec_nopty.c:243 src/exec_nopty.c:250 src/exec_nopty.c:257
-#: src/exec_nopty.c:264 src/exec_nopty.c:271 src/exec_nopty.c:278
-#: src/exec_nopty.c:285 src/exec_nopty.c:292 src/exec_nopty.c:299
-#: src/exec_nopty.c:306 src/exec_nopty.c:314 src/exec_nopty.c:322
-#: src/exec_nopty.c:732 src/exec_preload.c:341 src/exec_ptrace.c:474
-#: src/exec_ptrace.c:767 src/exec_ptrace.c:982 src/exec_ptrace.c:1094
-#: src/exec_ptrace.c:1269 src/exec_ptrace.c:1611 src/exec_ptrace.c:1638
-#: src/exec_pty.c:506 src/exec_pty.c:687 src/exec_pty.c:873 src/exec_pty.c:882
-#: src/exec_pty.c:889 src/exec_pty.c:896 src/exec_pty.c:903 src/exec_pty.c:910
-#: src/exec_pty.c:917 src/exec_pty.c:924 src/exec_pty.c:931 src/exec_pty.c:938
-#: src/exec_pty.c:945 src/exec_pty.c:953 src/load_plugins.c:157
-#: src/load_plugins.c:182 src/load_plugins.c:218 src/load_plugins.c:451
-#: src/load_plugins.c:457 src/parse_args.c:172 src/parse_args.c:193
+#: src/exec_iolog.c:212 src/exec_monitor.c:205 src/exec_monitor.c:460
+#: src/exec_monitor.c:466 src/exec_monitor.c:474 src/exec_monitor.c:482
+#: src/exec_monitor.c:489 src/exec_monitor.c:496 src/exec_monitor.c:503
+#: src/exec_monitor.c:510 src/exec_monitor.c:517 src/exec_monitor.c:524
+#: src/exec_monitor.c:531 src/exec_nopty.c:231 src/exec_nopty.c:240
+#: src/exec_nopty.c:247 src/exec_nopty.c:254 src/exec_nopty.c:261
+#: src/exec_nopty.c:268 src/exec_nopty.c:275 src/exec_nopty.c:282
+#: src/exec_nopty.c:289 src/exec_nopty.c:296 src/exec_nopty.c:303
+#: src/exec_nopty.c:310 src/exec_nopty.c:318 src/exec_nopty.c:326
+#: src/exec_nopty.c:736 src/exec_preload.c:343 src/exec_ptrace.c:475
+#: src/exec_ptrace.c:768 src/exec_ptrace.c:983 src/exec_ptrace.c:1095
+#: src/exec_ptrace.c:1270 src/exec_ptrace.c:1612 src/exec_ptrace.c:1639
+#: src/exec_pty.c:511 src/exec_pty.c:692 src/exec_pty.c:882 src/exec_pty.c:891
+#: src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912 src/exec_pty.c:919
+#: src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940 src/exec_pty.c:947
+#: src/exec_pty.c:954 src/exec_pty.c:962 src/load_plugins.c:98
+#: src/load_plugins.c:123 src/load_plugins.c:159 src/load_plugins.c:392
+#: src/load_plugins.c:398 src/parse_args.c:172 src/parse_args.c:193
 #: src/parse_args.c:267 src/parse_args.c:623 src/parse_args.c:645
 #: src/parse_args.c:670 src/preserve_fds.c:46 src/preserve_fds.c:131
 #: src/selinux.c:89 src/selinux.c:362 src/selinux.c:472 src/selinux.c:489
 #: src/selinux.c:496 src/sesh.c:206 src/sesh.c:240 src/sesh.c:246
-#: src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:639 src/sudo.c:704
-#: src/sudo.c:714 src/sudo.c:741 src/sudo.c:764 src/sudo.c:773 src/sudo.c:782
-#: src/sudo.c:799 src/sudo.c:841 src/sudo.c:851 src/sudo.c:884 src/sudo.c:1112
-#: src/sudo.c:1133 src/sudo.c:1426 src/sudo.c:1595 src/sudo.c:1822
-#: src/sudo.c:2156 src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:429
-#: src/sudo_edit.c:438 src/sudo_edit.c:538 src/sudo_edit.c:545
-#: src/sudo_edit.c:673 src/sudo_edit.c:693 src/sudo_intercept_common.c:115
-#: src/sudo_intercept_common.c:340
+#: src/sesh.c:253 src/sesh.c:259 src/sesh.c:470 src/sudo.c:641 src/sudo.c:706
+#: src/sudo.c:716 src/sudo.c:743 src/sudo.c:766 src/sudo.c:775 src/sudo.c:784
+#: src/sudo.c:801 src/sudo.c:842 src/sudo.c:851 src/sudo.c:861 src/sudo.c:894
+#: src/sudo.c:1122 src/sudo.c:1143 src/sudo.c:1436 src/sudo.c:1605
+#: src/sudo.c:1832 src/sudo.c:2166 src/sudo_edit.c:89 src/sudo_edit.c:149
+#: src/sudo_edit.c:429 src/sudo_edit.c:438 src/sudo_edit.c:538
+#: src/sudo_edit.c:545 src/sudo_edit.c:688 src/sudo_edit.c:708
+#: src/sudo_intercept_common.c:115 src/sudo_intercept_common.c:340
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
-#: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/json.c:55
-#: lib/util/json.c:184 lib/util/regex.c:113 lib/util/regex.c:121
-#: lib/util/sudo_conf.c:220 lib/util/sudo_conf.c:305 lib/util/sudo_conf.c:382
-#: lib/util/sudo_conf.c:666 src/conversation.c:81 src/exec_intercept.c:111
-#: src/exec_intercept.c:344 src/exec_intercept.c:504 src/exec_intercept.c:566
-#: src/exec_intercept.c:682 src/exec_intercept.c:806 src/exec_iolog.c:124
-#: src/exec_iolog.c:135 src/exec_iolog.c:212 src/exec_monitor.c:458
-#: src/exec_monitor.c:464 src/exec_monitor.c:472 src/exec_monitor.c:480
-#: src/exec_monitor.c:487 src/exec_monitor.c:494 src/exec_monitor.c:501
-#: src/exec_monitor.c:508 src/exec_monitor.c:515 src/exec_monitor.c:522
-#: src/exec_monitor.c:529 src/exec_nopty.c:227 src/exec_nopty.c:236
-#: src/exec_nopty.c:243 src/exec_nopty.c:250 src/exec_nopty.c:257
-#: src/exec_nopty.c:264 src/exec_nopty.c:271 src/exec_nopty.c:278
-#: src/exec_nopty.c:285 src/exec_nopty.c:292 src/exec_nopty.c:299
-#: src/exec_nopty.c:306 src/exec_nopty.c:314 src/exec_nopty.c:322
-#: src/exec_preload.c:341 src/exec_ptrace.c:474 src/exec_ptrace.c:767
-#: src/exec_ptrace.c:982 src/exec_ptrace.c:1638 src/exec_pty.c:506
-#: src/exec_pty.c:873 src/exec_pty.c:882 src/exec_pty.c:889 src/exec_pty.c:896
-#: src/exec_pty.c:903 src/exec_pty.c:910 src/exec_pty.c:917 src/exec_pty.c:924
-#: src/exec_pty.c:931 src/exec_pty.c:938 src/exec_pty.c:945 src/exec_pty.c:953
-#: src/load_plugins.c:157 src/load_plugins.c:182 src/load_plugins.c:218
-#: src/load_plugins.c:451 src/load_plugins.c:457 src/parse_args.c:172
+#: lib/util/aix.c:272 lib/util/gidlist.c:66 lib/util/json.c:56
+#: lib/util/json.c:198 lib/util/regex.c:173 lib/util/sudo_conf.c:216
+#: lib/util/sudo_conf.c:301 lib/util/sudo_conf.c:378 lib/util/sudo_conf.c:646
+#: src/conversation.c:81 src/exec_intercept.c:111 src/exec_intercept.c:344
+#: src/exec_intercept.c:518 src/exec_intercept.c:582 src/exec_intercept.c:706
+#: src/exec_intercept.c:830 src/exec_iolog.c:124 src/exec_iolog.c:135
+#: src/exec_iolog.c:212 src/exec_monitor.c:460 src/exec_monitor.c:466
+#: src/exec_monitor.c:474 src/exec_monitor.c:482 src/exec_monitor.c:489
+#: src/exec_monitor.c:496 src/exec_monitor.c:503 src/exec_monitor.c:510
+#: src/exec_monitor.c:517 src/exec_monitor.c:524 src/exec_monitor.c:531
+#: src/exec_nopty.c:231 src/exec_nopty.c:240 src/exec_nopty.c:247
+#: src/exec_nopty.c:254 src/exec_nopty.c:261 src/exec_nopty.c:268
+#: src/exec_nopty.c:275 src/exec_nopty.c:282 src/exec_nopty.c:289
+#: src/exec_nopty.c:296 src/exec_nopty.c:303 src/exec_nopty.c:310
+#: src/exec_nopty.c:318 src/exec_nopty.c:326 src/exec_preload.c:343
+#: src/exec_ptrace.c:475 src/exec_ptrace.c:768 src/exec_ptrace.c:983
+#: src/exec_ptrace.c:1639 src/exec_pty.c:511 src/exec_pty.c:882
+#: src/exec_pty.c:891 src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912
+#: src/exec_pty.c:919 src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940
+#: src/exec_pty.c:947 src/exec_pty.c:954 src/exec_pty.c:962
+#: src/load_plugins.c:98 src/load_plugins.c:123 src/load_plugins.c:159
+#: src/load_plugins.c:392 src/load_plugins.c:398 src/parse_args.c:172
 #: src/parse_args.c:194 src/parse_args.c:267 src/parse_args.c:623
 #: src/parse_args.c:645 src/parse_args.c:670 src/preserve_fds.c:46
 #: src/preserve_fds.c:131 src/selinux.c:89 src/selinux.c:362 src/selinux.c:472
 #: src/selinux.c:489 src/selinux.c:496 src/sesh.c:206 src/sesh.c:471
-#: src/sudo.c:230 src/sudo.c:639 src/sudo.c:884 src/sudo.c:1112 src/sudo.c:1133
-#: src/sudo.c:1426 src/sudo.c:1595 src/sudo.c:1822 src/sudo.c:2156
+#: src/sudo.c:230 src/sudo.c:641 src/sudo.c:894 src/sudo.c:1122 src/sudo.c:1143
+#: src/sudo.c:1436 src/sudo.c:1605 src/sudo.c:1832 src/sudo.c:2166
 #: src/sudo_edit.c:89 src/sudo_edit.c:149 src/sudo_edit.c:429
 #: src/sudo_edit.c:438 src/sudo_edit.c:538 src/sudo_edit.c:545
-#: src/sudo_edit.c:673 src/sudo_edit.c:693 src/sudo_intercept_common.c:115
+#: src/sudo_edit.c:688 src/sudo_edit.c:708 src/sudo_intercept_common.c:115
 #: src/sudo_intercept_common.c:340
 msgid "unable to allocate memory"
 msgstr ""
@@ -112,9 +112,9 @@ msgstr ""
 msgid "%.*s exists but is not a directory (0%o)"
 msgstr ""
 
-#: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:677
-#: lib/util/sudo_conf.c:689 lib/util/sudo_conf.c:715 src/selinux.c:235
-#: src/selinux.c:265 src/sudo.c:371 src/sudo_edit.c:494 src/sudo_edit.c:557
+#: lib/util/mkdir_parents.c:103 lib/util/sudo_conf.c:666
+#: lib/util/sudo_conf.c:696 lib/util/sudo_conf.c:703 src/selinux.c:235
+#: src/selinux.c:265 src/sudo.c:373 src/sudo_edit.c:494 src/sudo_edit.c:557
 #, c-format
 msgid "unable to open %s"
 msgstr ""
@@ -129,7 +129,7 @@ msgstr ""
 msgid "unable to open %.*s"
 msgstr ""
 
-#: lib/util/regex.c:103
+#: lib/util/regex.c:163
 msgid "regular expression too large"
 msgstr ""
 
@@ -150,42 +150,42 @@ msgstr ""
 msgid "value too small"
 msgstr ""
 
-#: lib/util/sudo_conf.c:238
+#: lib/util/sudo_conf.c:234
 #, c-format
 msgid "invalid Path value \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:404 lib/util/sudo_conf.c:420 lib/util/sudo_conf.c:473
+#: lib/util/sudo_conf.c:400 lib/util/sudo_conf.c:453
 #, c-format
 msgid "invalid value for %s \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:441
+#: lib/util/sudo_conf.c:421
 #, c-format
 msgid "unsupported group source \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:457
+#: lib/util/sudo_conf.c:437
 #, c-format
 msgid "invalid max groups \"%s\" in %s, line %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:692
+#: lib/util/sudo_conf.c:669
 #, c-format
 msgid "%s is not a regular file"
 msgstr ""
 
-#: lib/util/sudo_conf.c:695 src/copy_file.c:164
+#: lib/util/sudo_conf.c:672 src/copy_file.c:164
 #, c-format
 msgid "%s is owned by uid %u, should be %u"
 msgstr ""
 
-#: lib/util/sudo_conf.c:699
+#: lib/util/sudo_conf.c:676
 #, c-format
 msgid "%s is world writable"
 msgstr ""
 
-#: lib/util/sudo_conf.c:702
+#: lib/util/sudo_conf.c:679
 #, c-format
 msgid "%s is group writable"
 msgstr ""
@@ -279,8 +279,8 @@ msgstr ""
 msgid "starting from %s"
 msgstr ""
 
-#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:567 src/exec_monitor.c:569
-#: src/exec_pty.c:225 src/exec_pty.c:1017 src/exec_pty.c:1019 src/signal.c:144
+#: src/exec.c:278 src/exec.c:351 src/exec_monitor.c:569 src/exec_monitor.c:571
+#: src/exec_pty.c:225 src/exec_pty.c:1026 src/exec_pty.c:1028 src/signal.c:144
 #: src/signal.c:151 src/signal.c:165 src/suspend_nopty.c:93
 #, c-format
 msgid "unable to set handler for signal %d"
@@ -300,60 +300,60 @@ msgstr ""
 
 #: src/exec_intercept.c:70 src/exec_iolog.c:165 src/exec_iolog.c:175
 #: src/exec_iolog.c:220 src/exec_iolog.c:227 src/exec_iolog.c:254
-#: src/exec_monitor.c:466 src/exec_monitor.c:474 src/exec_monitor.c:482
-#: src/exec_monitor.c:489 src/exec_monitor.c:496 src/exec_monitor.c:503
-#: src/exec_monitor.c:510 src/exec_monitor.c:517 src/exec_monitor.c:524
-#: src/exec_monitor.c:531 src/exec_nopty.c:229 src/exec_nopty.c:238
-#: src/exec_nopty.c:245 src/exec_nopty.c:252 src/exec_nopty.c:259
-#: src/exec_nopty.c:266 src/exec_nopty.c:273 src/exec_nopty.c:280
-#: src/exec_nopty.c:287 src/exec_nopty.c:294 src/exec_nopty.c:301
-#: src/exec_nopty.c:308 src/exec_nopty.c:316 src/exec_nopty.c:324
-#: src/exec_nopty.c:383 src/exec_nopty.c:449 src/exec_pty.c:355
-#: src/exec_pty.c:457 src/exec_pty.c:512 src/exec_pty.c:875 src/exec_pty.c:884
-#: src/exec_pty.c:891 src/exec_pty.c:898 src/exec_pty.c:905 src/exec_pty.c:912
-#: src/exec_pty.c:919 src/exec_pty.c:926 src/exec_pty.c:933 src/exec_pty.c:940
-#: src/exec_pty.c:947
+#: src/exec_monitor.c:468 src/exec_monitor.c:476 src/exec_monitor.c:484
+#: src/exec_monitor.c:491 src/exec_monitor.c:498 src/exec_monitor.c:505
+#: src/exec_monitor.c:512 src/exec_monitor.c:519 src/exec_monitor.c:526
+#: src/exec_monitor.c:533 src/exec_nopty.c:233 src/exec_nopty.c:242
+#: src/exec_nopty.c:249 src/exec_nopty.c:256 src/exec_nopty.c:263
+#: src/exec_nopty.c:270 src/exec_nopty.c:277 src/exec_nopty.c:284
+#: src/exec_nopty.c:291 src/exec_nopty.c:298 src/exec_nopty.c:305
+#: src/exec_nopty.c:312 src/exec_nopty.c:320 src/exec_nopty.c:328
+#: src/exec_nopty.c:387 src/exec_nopty.c:453 src/exec_pty.c:360
+#: src/exec_pty.c:462 src/exec_pty.c:517 src/exec_pty.c:884 src/exec_pty.c:893
+#: src/exec_pty.c:900 src/exec_pty.c:907 src/exec_pty.c:914 src/exec_pty.c:921
+#: src/exec_pty.c:928 src/exec_pty.c:935 src/exec_pty.c:942 src/exec_pty.c:949
+#: src/exec_pty.c:956
 msgid "unable to add event to queue"
 msgstr ""
 
-#: src/exec_intercept.c:317 src/sudo.c:1018
+#: src/exec_intercept.c:317 src/sudo.c:1028
 msgid "command not set by the security policy"
 msgstr ""
 
-#: src/exec_intercept.c:393 src/exec_intercept.c:421 src/sudo.c:1238
-#: src/sudo.c:1283 src/sudo.c:1327
+#: src/exec_intercept.c:395 src/exec_intercept.c:435 src/sudo.c:1248
+#: src/sudo.c:1293 src/sudo.c:1337
 msgid "command rejected by policy"
 msgstr ""
 
-#: src/exec_intercept.c:491 src/sudo.c:1925
+#: src/exec_intercept.c:505 src/sudo.c:1935
 msgid "approval plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:508 src/sudo.c:1243 src/sudo.c:1288 src/sudo.c:1332
-#: src/sudo.c:1406
+#: src/exec_intercept.c:530 src/sudo.c:1253 src/sudo.c:1298 src/sudo.c:1342
+#: src/sudo.c:1416
 msgid "policy plugin error"
 msgstr ""
 
-#: src/exec_intercept.c:543
+#: src/exec_intercept.c:559
 msgid "invalid PolicyCheckRequest"
 msgstr ""
 
-#: src/exec_intercept.c:678
+#: src/exec_intercept.c:702
 #, c-format
 msgid "client request too large: %zu"
 msgstr ""
 
-#: src/exec_intercept.c:720
+#: src/exec_intercept.c:744
 #, c-format
 msgid "unable to unpack %s size %zu"
 msgstr ""
 
-#: src/exec_intercept.c:768
+#: src/exec_intercept.c:792
 #, c-format
 msgid "unexpected type_case value %d in %s from %s"
 msgstr ""
 
-#: src/exec_intercept.c:794
+#: src/exec_intercept.c:818
 #, c-format
 msgid "server message too large: %zu"
 msgstr ""
@@ -376,93 +376,93 @@ msgstr ""
 msgid "error changing window size"
 msgstr ""
 
-#: src/exec_monitor.c:360
+#: src/exec_monitor.c:362
 msgid "error reading from socketpair"
 msgstr ""
 
-#: src/exec_monitor.c:377
+#: src/exec_monitor.c:379
 #, c-format
 msgid "unexpected reply type on backchannel: %d"
 msgstr ""
 
-#: src/exec_monitor.c:585
+#: src/exec_monitor.c:587
 msgid "unable to set controlling tty"
 msgstr ""
 
-#: src/exec_monitor.c:593 src/exec_nopty.c:494 src/exec_nopty.c:504
-#: src/exec_nopty.c:514 src/exec_nopty.c:548 src/exec_pty.c:1088
-#: src/exec_pty.c:1109 src/exec_pty.c:1129 src/tgetpass.c:305
+#: src/exec_monitor.c:595 src/exec_nopty.c:498 src/exec_nopty.c:508
+#: src/exec_nopty.c:518 src/exec_nopty.c:552 src/exec_pty.c:1097
+#: src/exec_pty.c:1118 src/exec_pty.c:1138 src/tgetpass.c:305
 msgid "unable to create pipe"
 msgstr ""
 
-#: src/exec_monitor.c:603
+#: src/exec_monitor.c:605
 msgid "unable to receive message from parent"
 msgstr ""
 
-#: src/exec_monitor.c:619 src/exec_nopty.c:591 src/exec_pty.c:1167
+#: src/exec_monitor.c:621 src/exec_nopty.c:595 src/exec_pty.c:1176
 #: src/sudo_edit.c:361 src/tgetpass.c:309
 msgid "unable to fork"
 msgstr ""
 
-#: src/exec_monitor.c:623 src/exec_monitor.c:721 src/exec_nopty.c:696
+#: src/exec_monitor.c:625 src/exec_monitor.c:723 src/exec_nopty.c:700
 msgid "unable to restore tty label"
 msgstr ""
 
-#: src/exec_monitor.c:636 src/sesh.c:217 src/sudo.c:1189
+#: src/exec_monitor.c:638 src/sesh.c:217 src/sudo.c:1199
 #, c-format
 msgid "unable to execute %s"
 msgstr ""
 
-#: src/exec_nopty.c:542 src/exec_pty.c:1026
+#: src/exec_nopty.c:546 src/exec_pty.c:1035
 msgid "policy plugin failed session initialization"
 msgstr ""
 
-#: src/exec_nopty.c:557 src/exec_pty.c:995 src/exec_pty.c:1004
+#: src/exec_nopty.c:561 src/exec_pty.c:1004 src/exec_pty.c:1013
 msgid "unable to create sockets"
 msgstr ""
 
-#: src/exec_nopty.c:684 src/exec_pty.c:1265
+#: src/exec_nopty.c:688 src/exec_pty.c:1274
 msgid "error in event loop"
 msgstr ""
 
-#: src/exec_preload.c:165 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
-#: src/net_ifs.c:620 src/net_ifs.c:851 src/sudo.c:486 src/sudo_edit.c:398
+#: src/exec_preload.c:167 src/net_ifs.c:206 src/net_ifs.c:372 src/net_ifs.c:433
+#: src/net_ifs.c:620 src/net_ifs.c:851 src/sudo.c:488 src/sudo_edit.c:398
 #: src/sudo_edit.c:406
 #, c-format
 msgid "internal error, %s overflow"
 msgstr ""
 
-#: src/exec_ptrace.c:1078 src/exec_ptrace.c:1103 src/exec_ptrace.c:1909
+#: src/exec_ptrace.c:1079 src/exec_ptrace.c:1104 src/exec_ptrace.c:1900
 #, c-format
 msgid "unable to set registers for process %d"
 msgstr ""
 
-#: src/exec_ptrace.c:1098 src/exec_ptrace.c:1273 src/exec_ptrace.c:1615
+#: src/exec_ptrace.c:1099 src/exec_ptrace.c:1274 src/exec_ptrace.c:1616
 #, c-format
 msgid "process %d exited unexpectedly"
 msgstr ""
 
-#: src/exec_ptrace.c:1207
+#: src/exec_ptrace.c:1208
 msgid "unable to set seccomp filter"
 msgstr ""
 
-#: src/exec_ptrace.c:1404
+#: src/exec_ptrace.c:1405
 #, c-format
 msgid "interpreter argument , expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1503
+#: src/exec_ptrace.c:1504
 #, c-format
 msgid "pathname mismatch, expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1512 src/exec_ptrace.c:1519 src/exec_ptrace.c:1532
-#: src/exec_ptrace.c:1540 src/exec_ptrace.c:1546 src/exec_ptrace.c:1552
+#: src/exec_ptrace.c:1513 src/exec_ptrace.c:1520 src/exec_ptrace.c:1533
+#: src/exec_ptrace.c:1541 src/exec_ptrace.c:1547 src/exec_ptrace.c:1553
 #, c-format
 msgid "%s[%d] mismatch, expected \"%s\", got \"%s\""
 msgstr ""
 
-#: src/exec_ptrace.c:1619
+#: src/exec_ptrace.c:1620
 #, c-format
 msgid "process %d unexpected status 0x%x"
 msgstr ""
@@ -481,67 +481,56 @@ msgstr ""
 msgid "unable to allocate pty"
 msgstr ""
 
-#: src/exec_pty.c:263 src/signal.c:101 src/suspend_nopty.c:99
+#: src/exec_pty.c:268 src/signal.c:101 src/suspend_nopty.c:99
 #, c-format
 msgid "unable to restore handler for signal %d"
 msgstr ""
 
-#: src/exec_pty.c:1213
+#: src/exec_pty.c:1222
 msgid "unable to send message to monitor process"
 msgstr ""
 
-#: src/load_plugins.c:109 src/load_plugins.c:123 src/load_plugins.c:129
-#: src/load_plugins.c:279 src/load_plugins.c:289 src/load_plugins.c:299
-#: src/load_plugins.c:346
+#: src/load_plugins.c:73 src/load_plugins.c:220 src/load_plugins.c:230
+#: src/load_plugins.c:240 src/load_plugins.c:287
 #, c-format
 msgid "error in %s, line %d while loading plugin \"%s\""
 msgstr ""
 
-#: src/load_plugins.c:125
-#, c-format
-msgid "%s must be owned by uid %d"
-msgstr ""
-
-#: src/load_plugins.c:131
-#, c-format
-msgid "%s must be only be writable by owner"
-msgstr ""
-
-#: src/load_plugins.c:243 src/load_plugins.c:314
+#: src/load_plugins.c:184 src/load_plugins.c:255
 #, c-format
 msgid "ignoring duplicate plugin \"%s\" in %s, line %d"
 msgstr ""
 
-#: src/load_plugins.c:281
+#: src/load_plugins.c:222
 #, c-format
 msgid "unable to load %s: %s"
 msgstr ""
 
-#: src/load_plugins.c:291
+#: src/load_plugins.c:232
 #, c-format
 msgid "unable to find symbol \"%s\" in %s"
 msgstr ""
 
-#: src/load_plugins.c:301
+#: src/load_plugins.c:242
 #, c-format
 msgid "incompatible plugin major version %d (expected %d) found in %s"
 msgstr ""
 
-#: src/load_plugins.c:319
+#: src/load_plugins.c:260
 #, c-format
 msgid "ignoring policy plugin \"%s\" in %s, line %d"
 msgstr ""
 
-#: src/load_plugins.c:322
+#: src/load_plugins.c:263
 msgid "only a single policy plugin may be specified"
 msgstr ""
 
-#: src/load_plugins.c:348
+#: src/load_plugins.c:289
 #, c-format
 msgid "unknown plugin type %d found in %s"
 msgstr ""
 
-#: src/load_plugins.c:531
+#: src/load_plugins.c:472
 #, c-format
 msgid "policy plugin %s does not include a check_policy method"
 msgstr ""
@@ -943,139 +932,139 @@ msgstr ""
 msgid "plugin did not return a command to execute"
 msgstr ""
 
-#: src/sudo.c:305
+#: src/sudo.c:306
 #, c-format
 msgid "unexpected sudo mode 0x%x"
 msgstr ""
 
-#: src/sudo.c:553
+#: src/sudo.c:555
 #, c-format
 msgid "you do not exist in the %s database"
 msgstr ""
 
-#: src/sudo.c:610
+#: src/sudo.c:612
 msgid "unable to determine tty"
 msgstr ""
 
-#: src/sudo.c:918
+#: src/sudo.c:928
 msgid ""
 "The \"no new privileges\" flag is set, which prevents sudo from running as "
 "root."
 msgstr ""
 
-#: src/sudo.c:920
+#: src/sudo.c:930
 msgid ""
 "If sudo is running in a container, you may need to adjust the container "
 "configuration to disable the flag."
 msgstr ""
 
-#: src/sudo.c:954
+#: src/sudo.c:964
 #, c-format
 msgid "%s must be owned by uid %d and have the setuid bit set"
 msgstr ""
 
-#: src/sudo.c:957
+#: src/sudo.c:967
 #, c-format
 msgid ""
 "effective uid is not %d, is %s on a file system with the 'nosuid' option set "
 "or an NFS file system without root privileges?"
 msgstr ""
 
-#: src/sudo.c:963
+#: src/sudo.c:973
 #, c-format
 msgid "effective uid is not %d, is sudo installed setuid root?"
 msgstr ""
 
-#: src/sudo.c:979 src/tgetpass.c:331
+#: src/sudo.c:989 src/tgetpass.c:331
 msgid "unable to set supplementary group IDs"
 msgstr ""
 
-#: src/sudo.c:986
+#: src/sudo.c:996
 #, c-format
 msgid "unable to set effective gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:992
+#: src/sudo.c:1002
 #, c-format
 msgid "unable to set gid to runas gid %u"
 msgstr ""
 
-#: src/sudo.c:1022
+#: src/sudo.c:1032
 msgid "argv not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1026
+#: src/sudo.c:1036
 msgid "envp not set by the security policy"
 msgstr ""
 
-#: src/sudo.c:1048
+#: src/sudo.c:1058
 #, c-format
 msgid "unexpected child termination condition: %d"
 msgstr ""
 
-#: src/sudo.c:1161
+#: src/sudo.c:1171
 msgid "unable to initialize policy plugin"
 msgstr ""
 
-#: src/sudo.c:1223
+#: src/sudo.c:1233
 #, c-format
 msgid "policy plugin %s is missing the \"check_policy\" method"
 msgstr ""
 
-#: src/sudo.c:1269
+#: src/sudo.c:1279
 #, c-format
 msgid "policy plugin %s does not support listing privileges"
 msgstr ""
 
-#: src/sudo.c:1313
+#: src/sudo.c:1323
 #, c-format
 msgid "policy plugin %s does not support the -v option"
 msgstr ""
 
-#: src/sudo.c:1351
+#: src/sudo.c:1361
 #, c-format
 msgid "policy plugin %s does not support the -k/-K options"
 msgstr ""
 
-#: src/sudo.c:1480
+#: src/sudo.c:1490
 #, c-format
 msgid "error initializing I/O plugin %s"
 msgstr ""
 
-#: src/sudo.c:1483
+#: src/sudo.c:1493
 msgid "error initializing I/O plugin"
 msgstr ""
 
-#: src/sudo.c:1632
+#: src/sudo.c:1642
 #, c-format
 msgid "error initializing audit plugin %s"
 msgstr ""
 
-#: src/sudo.c:1711
+#: src/sudo.c:1721
 #, c-format
 msgid "%s: unable to log error event%s%s"
 msgstr ""
 
-#: src/sudo.c:1747
+#: src/sudo.c:1757
 #, c-format
 msgid "%s: unable to log accept event%s%s"
 msgstr ""
 
-#: src/sudo.c:1752 src/sudo.c:1790
+#: src/sudo.c:1762 src/sudo.c:1800
 msgid "audit plugin error"
 msgstr ""
 
-#: src/sudo.c:1785
+#: src/sudo.c:1795
 #, c-format
 msgid "%s: unable to log reject event%s%s"
 msgstr ""
 
-#: src/sudo.c:1845
+#: src/sudo.c:1855
 #, c-format
 msgid "error initializing approval plugin %s"
 msgstr ""
 
-#: src/sudo.c:1915
+#: src/sudo.c:1925
 msgid "command rejected by approver"
 msgstr ""
 
@@ -1119,16 +1108,20 @@ msgid ""
 "unable to copy some of the temporary files back to their original location"
 msgstr ""
 
-#: src/sudo_edit.c:645
+#: src/sudo_edit.c:646
 #, c-format
 msgid "unable to change uid to root (%u)"
 msgstr ""
 
-#: src/sudo_edit.c:666
+#: src/sudo_edit.c:660
+msgid "plugin error: invalid file list for sudoedit"
+msgstr ""
+
+#: src/sudo_edit.c:681
 msgid "plugin error: missing file list for sudoedit"
 msgstr ""
 
-#: src/sudo_edit.c:709 src/sudo_edit.c:723
+#: src/sudo_edit.c:724 src/sudo_edit.c:739
 msgid "unable to read the clock"
 msgstr ""