bin: In backup script, ask for `sudo` upfront