It may be possible to have sudo use pam_open_session() and pam_close_session() along with pam_xauth.so to do this transparently. However, this would require a persistent sudo process that hangs around. - todd