SUDO adjustments
    
    The SUDO rule details facet has been updated to support the latest UI
    spec. The facet consists of 5 sections: general, users, hosts, commands,
    and run-as.
    
    The general section contains the SUDO rule description and status. If
    the status is changed, the sudorule-enable/disable will be invoked.
    
    The other sections contain radio buttons for the association category
    and tables for the members. When a member is added or removed, the
    category will be adjusted appropriately. If the category is changed to
    'all', 'allow', or 'deny', all members will be removed.
    
    The last section is currently not working because backend support is
    not yet available.
    
    The adder dialog boxes for users, groups, and hosts has been modified
    to accept external identities. The layout for the base adder dialog
    was updated. The base dialog class was updated to support templates.
    The SUDO dialog boxes were implemented using templates. New CSS
    classes were added to ipa.css.
    
    The HBAC rule details facet has been updated as well.