Doesn't sudo have a default time setting? Only once every ten minutes per process does it elevate?

> The point is about a secure & safe way for a common person to authorize an application

I'm not sure that's even possible. The common person doesn't tend to fear putting their credit card info into a random online form.