make sudo setting more explicit (allow a deeper false to override a higher true)