initially i did it without sudo, remotely over ssh as the purism user.
It prompted me for password (auth kit, or polkit, or something “kit”). After it prompted like 20+ times, I eventually cancelled it and did it via sudo and then only got like one prompt.