A sudo-based maintenance timer works on one host and fails on another

The same sudoers snippets exist, yet one host denies the command because file ordering changed the effective rule precedence.