code: def make_sudo_cmd(sudo_user, executable, cmd):
      
      # Rather than detect if sudo wants a password this time, -k makes
      # sudo always ask for a password if one is required.
      # Passing a quoted compound command to sudo (or sudo -s)
      # directly doesn't work, so we shellquote it with pipes.quote()
      # and pass the quoted string to the user's shell.  We loop reading
      # output until we see the randomly-generated sudo prompt set with
      # the -p option.
      randbits = ''.join(chr(random.randint(ord('a'), ord('z'))) for x in xrange(32))
      prompt = '[sudo via ansible, key=%s] password: ' % randbits
      sudocmd = '%s -k && %s %s -S -p "%s" -u %s %s -c %s' % (
          C.DEFAULT_SUDO_EXE, C.DEFAULT_SUDO_EXE, C.DEFAULT_SUDO_FLAGS,
          prompt, sudo_user, executable or '$SHELL', pipes.quote(cmd))
      return ('/bin/sh -c ' + pipes.quote(sudocmd), prompt)
docs: helper function for connection plugins to create sudo commands