IIRC sudo gainroot should't require a password at all (since sudo, if configured to do so, will ask the password of the current user)