I use doas(1) to execute commands as another user (mostly as a root)

Config file can be pretty minimal.

# /usr/local/etc/doas.conf
permit nopass cdrmack as root

After installing doas there should be an example config "doas.conf.sample" available under /usr/local/etc/.