pollution: allow ocfstaff to sudo