shell: package installs need sudo