update TODO
session: nowadays by default (without -Z) many coreutils use setfscreate (mv, sed etc)
sudo: switching roles back and forth