lockdown unnecessary as long as sudo has suder passwordless rights