Yes, I’m too lazy: I love NOPASSWD in my sudoers. Yes, this is bad security practice. Anyway, after installing Hardy I couldn’t make it work.
Finally I found that sudo takes the last appropriate entry that matches, not the first, as other tools do.
So after moving my custom sudoers rule to the end of /etc/sudoers, I now can continue my bad habits …