Require sudo on all views that have has_access(MEMBER_OWNER)
Require sudo on all pages that change settings
Dont require password validation on forms