Make sudo usage configurable.
Only print one unadorned TOTP token.

This is more useful for scripting, and you can always just send another
challenge if your token expires.