I’m not an OSX expert, but it seems like you should be able to make a compiled binary to do this and then give it setuid permissions, avoiding the need for a password. At least that is how I would do it on other unixes.