use sudo during config changes