main
Use #include <foo.h> instead of #include "foo.h" in most cases.
Split out address matching into its own file and add regression tests for it.
Make check_digest test sudo_filedigest() itself instead of the underlying SHA2 functions. That way we can test it regardless of whether we use sudo's SHA2 functions or a library version.