This is Linux-based, because I don't have FreeBSD experience, but is related in security posture. I have a more controversial opinion: If you're going to use `

This is Linux-based, because I don't have FreeBSD experience, but is related in security posture. I have a more controversial opinion: If you're going to use `sudo`, you shouldn't use passwords. Your login passwords should only be given to the login prompt, which you hopefully have some reasonable faith in its integrity (if not; game over already). If you're typing your password into terminals after login, that's a great place to steal your password. I would much prefer to use pam_krb5 to "kinit on login", and then by sudo to authenticate your session. Then you shouldn't ever be tempted to type your password into potentially untrusted programs. Of course, if you're sure you have no malware on your computer, then there's also no need for a sudo password -- nobody but yourself could be running commands!