run_sim now ensures sudo