I have done some major work today on sudo. Added an SELinux shell sesh. That does nothing but exec the command a second time. This will eliminate the globing problems.
I also have it automatically transitioning to sysadm_r if you are able to.
Sudo and policy rpm are required to make this work.
Dan