I think there's some oversight here. I have to approve anything starting with sudo. It couldn't run a 'du' without approval. I actually had to let it always auto-install software, or it wanted an approval everytime.
With that said, yeah, in a nutshell