run only hpasmcli under sudo, more output cleanup