use sudo for chef-client