fix osem sudo config and allow osem-admins group
The sudo rules for the osem user need to be quoted in salt to avoid the
"... PASSWD:" part is interpreted as key, and everything after it as
value (which will result in an invalid sudo rule).
Also add group permissions for the osem-admins group so that they can
use sudo.