move sudo smarts into all the actors and strip out double sudo calls