ipa/client: Improve naming HBAC, sudo rules
    
    Rename:
    - "group/sysadmin-main" to "usergroup/sysadmin-main" to prepare for
      using host groups
    - "sudo/all" to "all-users/sudo" likewise to make it apparent that it's
      about users and to put the resource last to which access is granted
    
    Signed-off-by: Nils Philippsen <nils@redhat.com>