[puppet] Make sure sudoers files is 0440