wrapper of puppetlabs/sudo