Add security test to detect when sudo is being called in code.

[ericwb]

Transfer of OpenStack blueprint:
https://blueprints.launchpad.net/bandit/+spec/detect-sudo-use

This could be quite noisy, but would be good to have. I think that now we have documentation we can add tests like this but have them disabled by default if they prove too noisy in practice.