gitlab runs ci jobs with umask 0000 to prevent issues with file
permissions. sudo refuses to look at configuration files in
/etc/sudoers.d if it is world-writable.

Fix these permissions so that sudo still works.