I was assuming a more complex configuration than the wide-open one advocated by Barb, which seems to add little to no security benefit.

I'm sorry I wasn't clear on this point; of course pushing out a single file to n machines shouldn't be a problem.

Of course. And a complex sudoers setup can be in a single sudoers file distributed to thousands of hosts. The sudoers syntax allows for as much or as little complexity as suits your needs. ...Barb