cinder should be able to call for sudo