monitoring user creation now with sudo rights