When proper infrastructure for controlling the overall per-installation security level is in place, would be nice to have possibility to include 'sudo -k' in system shell logout rc.
Unneeded since 'tty_tickets' got introduced.