sudoOption should allow to negate
We should be able of negating integers, strings, bool_integer and bool_string equalities. With this we will be fully supporting sudo LDAP syntax.
(from redmine: issue id 2678, created on 2013-08-27, closed on 2015-05-06)