This adds a --sudo flag, and the corresponding /etc/sudoers.d configuration snippet, to run everything under sudo(8) for debugging.