There is still a sudo step that has to happen on the host.
OIDC setup is now automated in the container.
