make service use sudo