script/deploy: use sudo