refactoring; no shell script, sudo with password