“With sudo, you need to run a third-party automation management system (like CFEngine or Puppet) and third-party authentication modules on the box. Furthermore, if you plan to externalize the box at all, you are going to have to replace sudo with the new vendors’ version of sudo.”