Cleaner use of sudo in provisoning and using sudoers to allow rsync to copy to /var/...