@exi that sounds like a usecase for util-linux' setpriv really, i.e. in such an "offline" case you really don't want the PAM session and everything it entails, hence sudo isn't really the right tool anyway (and neither is run0).