we now set runas_default early there is no need to call update_defaults with SETDEF_RUNAS after sudoers has been parsed.