move sudo to script call