minimal su/sudo replacement which prevents TTY hijacking by starting a new session with a separate terminal and proxying all input