sudo can do more things than most people have ever fathomed. And large organizations trying to follow least privileged access best practices end up with enormous and complex sudo rulesets.