add password mask to sudo