honor ask_sudo_pass in config