^ thanks for all the discussion and help, because our need is more to

learn

how sudo is being used and not for active monitoring

shell_history

seems good enough for our current use but will definately implement it as suggested with process join