drop sudo usage unless :sudo property is explicitly enabled