Rootwrap will return "not authorized" for a command
that is defined in the rootwrap filters but not
installed on the system. Therefore return the first
matching filter for such a command so that sudo will
try to execute it and return a more appropriate error.
Change-Id: I77eeff229e73d55083a735af7a9029469132c800