Different user for exec; use sudo; http auth, refactoring, cleanup