Sudo for blue teams: how to control and log better