You could do this as a launchd service, which will run as root and will happen automatically with startup. No sudo nor brew required. See /Library/LaunchDaemon

You could do this as a launchd service, which will run as root and will happen automatically with startup. No sudo nor brew required. See /Library/LaunchDaemons and launchctl.