diff --git a/.local/share/chezmoi/home/.chezmoiscripts/darwin/run_onchange_after_10_configure-macos.tmpl b/.local/share/chezmoi/home/.chezmoiscripts/darwin/run_onchange_after_10_configure-macos.tmpl
index 9952f1d6..7c3c3fce 100644
--- a/.local/share/chezmoi/home/.chezmoiscripts/darwin/run_onchange_after_10_configure-macos.tmpl
+++ b/.local/share/chezmoi/home/.chezmoiscripts/darwin/run_onchange_after_10_configure-macos.tmpl
@@ -5,16 +5,16 @@
 
 logg 'Applying optimized macOS settings'
 
+# Ask for the administrator password upfront
+logg info 'A sudo password is required to apply some of the macOS optimizations.'
+sudo echo "Sudo access granted."
+
 set -x
 
 # Close any open System Preferences panes, to prevent them from overriding
 # settings we’re about to change
 osascript -e 'tell application "System Preferences" to quit'
 
-# Ask for the administrator password upfront
-logg info 'A sudo password is required to apply some of the macOS optimizations.'
-sudo echo "Sudo access granted."
-
 # Keep-alive: update existing `sudo` time stamp until `.macos` has finished
 while true; do sudo -n true; sleep 60; kill -0 "$$" || exit; done 2>/dev/null &