- optionally manage sudo for osg::bestman
- tweak the firewall management for osg::bestman