I forgot to mention, in the announcement, that sudo password changes are not instantaneous: they can take between 5 to 8 minutes to propagate to any given host.
More specifically, the password files are generated on the master LDAP server every five minutes, starting at the third minute of the hour, with a cron schedule like this:
3,8,13,18,23,28,33,38,43,48,53,58
Then those files are synchronized on a more standard 5 minutes schedule to all hosts.
There are also delays involved in the mail loop, of course.
Sorry if this wasn't made clearer up front. Don't hesitate to reach out on IRC or by email if there are any further problems.
A.