Make passwordless root access optional - ease integration qrexec authorization for sudo. QubesOS/qubes-issues#2695