A sudo rule matches a command path before alternatives flips the symlink to a new binary during a failover rehearsal

Privilege logic was tied to one pathname and the real executable moved beneath it. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.