Run sudo commands with a Fernet-encrypted password bound to machine-id + user.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Run sudo commands with a Fernet-encrypted password bound to machine-id + user.