Back-port 7.x's hook_disable implementation

When the module is disabled, all sudo users should receive their elevated permissions; otherwise, there is a risk of unintended lockout.