Oh, then OSX's sudo has little reason to not use PAM. In which case, this project would be better written as a PAM module instead of a sudo fork.