support for su during bootstrap in similar manner to sudo

I needed this today. Should it be more explicit about which password is being requested and why?