Fixes #9555: sudo not needed with cert authn