sudo -g with an "unitary" runas spec behaves differently

[squell]

In original sudo, a user machine = (ALL) command sudoers line forbids the use of -g, even in cases when the group that you would add with -g is actually a group that your user is a part of.

Or to put it more succinctly, sudo-rs permits using a superfluous -g option. This has no security implications.