Amazingly, you can't do "sudo -u root bash" on a Cisco PIX, no matter how many times you try.
More coffee required here, evidently.