cli.md: sudo at the right place