However, because lex does greedy matching, {WORD} will match
instead of the "^Defaults[:@]?" line.
-4) Because the parser only does a single pass it is possible to
+4) In list mode (sudo -l), characters escaped with a backslash
+ are shown verbatim with the backslash.
+
+5) Because the parser only does a single pass it is possible to
make a sudoers file where the "defaults" options are set after
a user's entry has been validated, changing the permissions for
the user. The work-around is to put all 'defaults' entries