enable sudo for bro and broctl in container by default