allow per-host sudo operation