Repo user needs to be able to run sudo without password.