modify sudoers to log and require password for wheel, let authorized keys go directly to root