"Experimentally" allow opting out from password-less sudo feature?

[spe987-create]

Hello, I was waiting for "allow opting out from password-less sudo" feature in v2.2.0 release and I see "Experimentally" word in front of it in release notes. Does it mean that it is not fully ready yet? If so, I would be grateful to hear approximate date that the stable version will be available. I am not trying to push anything, just curious how long it is going to take if it is possible to give some estimation. Thank you very much

[AkihiroSuda]

Experimental due to these caveats

lima/website/content/en/docs/config/sudo.md

Lines 20 to 26 in bc7ba1e

	## Caveats
	- Requires `plain: true` on non-macOS guests ([GHSA-2j9v-p4xj-cjw2](https://github.com/lima-vm/lima/security/advisories/GHSA-2j9v-p4xj-cjw2)): the guest agent's Unix socket tunneling is disabled until it can safely refuse privileged socket tunneling with passwordless sudo off.
	- Only applies to cloud-init provisioned guests (QEMU/vz). Setting `user.passwordlessSudo: false` on WSL2 (Windows) guests returns a validation error, as WSL2 does not support this configuration as of now.
	- The guest user is already a member of the `adm` and `systemd-journal` groups, which grants passive read access to `/var/log/*` and the full system journal independent of sudo.
	- `param` still relies on sudo internally (`param.env` is read via `sudo cat` inside the guest), so it may not work as expected when `user.passwordlessSudo: false` is set. A warning is printed in this case.
	- **macOS**: not configurable. Password-required sudo is always on (except `/sbin/shutdown -h now`), matching the built-in [macOS guest](/docs/usage/guests/macos/) behavior. Setting `user.passwordlessSudo: true` on a macOS guest returns a validation error.