Add `sudo()` to call `get_param` where necessary, and make the web client use a
controller instead of directly accessing parameters.