Instead, prefix the replacements with "testsudoers_" and use a custom pwutil backend so they get used.
Todd C. Miller