Per paramiko docs: Only channels using exec_command or invoke_shell WITHOUT a pty will ever have data on the stderr stream.
This means modules can’t output things to stderr, more or less. If a module does return something unparseable, we can still have Ansible
return information about what went wrong, but debug should probably just go to /var/log/messages via /usr/bin/logger or BETTER, python standard
logging classes.
I will be changing modules to remove debug so they can continue working with sudo, and then reinstating upgraded sudo.
–Michael