update.sh: use sudo