Add support for ensuring gpadmin is allowed passwordless sudo

[kdunn-pivotal]

Ideally, we'd use the runtime / cloud provider detection to know whether a key was injected or whether Ansible is expected to do that - to make it totally "seemless".