Not: #include "config.h" That way we get the correct config.h when build dir != src dir
cleanup routine in the error case. This means we no longer need to compile a special version of alloc.o for visudo.