More sudo hardening (done right this time), plus added monitoring (need to squish and squash)