add user to sudoers
no sudo group because user now
better lockdown fn