I'm guessing it spawns a persistent elevated process that processes commands passed to it by 'sudo' and that exits after a while when idle. No credentials need

I'm guessing it spawns a persistent elevated process that processes commands passed to it by 'sudo' and that exits after a while when idle. No credentials need to be stored anywhere.