throw out sudo stuff (use group rights instead)