i have askSudo and askPassword that let the llm ask for one-time sudo use or passwords (without leaking them to their context)