use an operations group instead of sudo

@addshore check please

This is step one of clearing up how we manage groups. This might also be a first step to allowing delegation of certain functions in future if we need them as we are moving to a more focused name scheme @Southparkfan