Instead of changing a line in the sudoers file we just copy a new drop-in file into the sudoers.d/ dir. Easier, less error-prone and allows everyone to see 'who' the sudo enabled users are (since it is world readable).