generally yes if it's the HQ context.
so, our sudo commands have two modes, one for the cchq user running the code in its own user space (anything generally within /home/cchq/

on the other end, no sudo_user=foo, is for OS level things that we have granted on the sudoers file, like apt-get, apache commands and the whole shake and bake for the supervisord.conf file in /etc/supervisord.conf