Use sudo -n for all sudo commands. Use sudo -u opendnssec for ods-signer commands to get access to the socket.