It's not necessarily for deploys (though you certainly could make a workflow that uses it to do so!) but I developed a dual-control plugin for sudo while at Square. We use it extensively.
https://github.com/square/sudo_pair
In action: https://raw.githubusercontent.com/square/sudo_pair/master/de...