only asks for sudo access once