A sudoers include file loads later and quietly re-enables a broad NOPASSWD rule the team thought it removed

Privilege hardening seems complete, yet one lexical include order detail restores broad administrative access after the next package update.