hmm -- feels okay

`bash -c` presumably was added because we needed a special kind of shell environment.  but perhaps this was to run `visudo`.  i don't see why `sed` would require any special permissions.  let's go with this but keep an eye on it.  (perhaps add a comment in the code...)