root scripts now run via /etc/sudoers