minor organizing change

added sudo (to discourage root use), added aptitude package, segregated by role