asking for a password to do an authenticated action is about as far away from surprising as I can legitimately reason about. The contextual blurb does have a w

asking for a password to do an authenticated action is about as far away from surprising as I can legitimately reason about. The contextual blurb does have a way of disabling it in a persistent config, which is easy enough to set. It also goes to stderr and not stdout and does nothing to alter the output of the command itself. It also does not show if you have NOPASSWD: set in your sudoers. So even less surprising.