avoiding sudo privs