Sudo security patches

[TotalGriffLock]

I ran into some issues during my installation, I was finding on a brand new pi hole install that some of the commands needed sudo to run, and were failing when reviewing the systemd journal (but would work manually). This patch resolves this, and also creates a much more tailored sudoers file which correctly addresses the requirements of the script and nothing more.