Re: Oh!
sudo can also allow a user A to run something as user B, without it leading to a shell being spawned as user B (in fact user B may not have aan acutal shell). I find that quite useful when trying to stop users trying to subvert some of the measures we've put in for security/audit.