sudo_pair: requires another human to approve and monitor privileged sudo sessions