before :all to disable `sudo` and then re-enable `sudo`