When you give every server a unique root password, shouldn’t then each sudo-user have a unique password as well?