This will be great. We can finally deprecate sudo on systemd systems. Then we should be able to deprecate PAM, setuid bit, etc.
I can see creating a system with zero setuid files, but I don't think this reduces PAM use, does it?
Not setuid generically, but `sudo` itself has a bunch of pam support/dependency.