The reindex script, which is run as search, needs to restart jetty and it needs sudo for that. I suppose we could restrict the search account to only be allows to restart jetty and nothing else, but that seems overkill to me.