Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a command

but the NOPASSWD flag was set.
Make runasspec, runaslist, runasuser, and nopasswd typeless in parse.yacc
Add support for '!' in the runas list
Fix double printing of '%' and '+' for groups and netgroups respectively
Add *_matched macros (no need for local stack variable).  Should only be
used directly after a pop (since top must be >= 2).

sudo.c

@@ -375,6 +375,7 @@ int main(argc, argv)
 	case VALIDATE_NOT_OK:
 	    check_user();
 
+	case VALIDATE_NOT_OK_NOPASS:
 #ifndef DONT_LEAK_PATH_INFO
 	    log_error(rtn);
 	    if (cmnd_status == NOT_FOUND_DOT)