[iroddis]

I think it’s a bit remiss to not include all of the downsides of this approach. sudo allows control over which groups can exercise which commands, what args those commands accept, subshell spawns, etc, etc, etc.

This approach loses a lot of this fine-grained control, and also relies on trusted keys, which are harder to manage than editing a sudoers file.

To see all the amazing things that sudo can do, I’d really recommend the Sudo Mastery book.

[yjftsjthsd-h]

SSH can do some of that with ForceCommand, though I agree that's not as flexible/precise.