derp. it turns out I do not need to write my own version of sudo as a user