Separate privileged function calls

[blee]

A 'confman commit', for example, generates a lot of overhead calling 'sudo install'. This does not scale well when large amounts of files are involved. It also unnecessarily clutters syslog with what is logically a single operation.

Since bash doesn't allow escalating individual functions, the alternative may be to escalate a wrapper executable. For example, 'sudo confmansudo conf_rollout ...'

This may introduce race conditions involving expiration of the sudo timeout.