diff --git a/letsencrypt/client/network2.py b/letsencrypt/client/network2.py
index 16ab80f3b..eaa485a8d 100644
--- a/letsencrypt/client/network2.py
+++ b/letsencrypt/client/network2.py
@@ -315,11 +315,7 @@ class Network(object):
         try:
             authzr_uri = response.links['up']['url']
         except KeyError:
-            # TODO: Right now Boulder responds with the authorization resource
-            # instead of a challenge resource... this can be uncommented
-            # once the error is fixed (boulder#130).
-            return None
-            # raise errors.NetworkError('"up" Link header missing')
+            raise errors.NetworkError('"up" Link header missing')
         challr = messages2.ChallengeResource(
             authzr_uri=authzr_uri,
             body=messages2.ChallengeBody.from_json(response.json()))
diff --git a/letsencrypt/client/plugins/apache/configurator.py b/letsencrypt/client/plugins/apache/configurator.py
index ff3842200..33abad3c5 100644
--- a/letsencrypt/client/plugins/apache/configurator.py
+++ b/letsencrypt/client/plugins/apache/configurator.py
@@ -908,7 +908,7 @@ class ApacheConfigurator(augeas_configurator.AugeasConfigurator):
         """
         try:
             proc = subprocess.Popen(
-                ["sudo", self.config.apache_ctl, "configtest"], # TODO: sudo?
+                [self.config.apache_ctl, "configtest"],
                 stdout=subprocess.PIPE,
                 stderr=subprocess.PIPE)
             stdout, stderr = proc.communicate()
@@ -1046,7 +1046,7 @@ def enable_mod(mod_name, apache_init_script, apache_enmod):
     try:
         # Use check_output so the command will finish before reloading
         # TODO: a2enmod is debian specific...
-        subprocess.check_call(["sudo", apache_enmod, mod_name],  # TODO: sudo?
+        subprocess.check_call([apache_enmod, mod_name],
                               stdout=open("/dev/null", "w"),
                               stderr=open("/dev/null", "w"))
         apache_restart(apache_init_script)
diff --git a/letsencrypt/client/tests/network2_test.py b/letsencrypt/client/tests/network2_test.py
index 195788d66..d14d27f6a 100644
--- a/letsencrypt/client/tests/network2_test.py
+++ b/letsencrypt/client/tests/network2_test.py
@@ -286,11 +286,8 @@ class NetworkTest(unittest.TestCase):
 
     def test_answer_challenge_missing_next(self):
         self._mock_post_get()
-        self.assertTrue(self.net.answer_challenge(
-            self.challr.body, challenges.DNSResponse()) is None)
-        # TODO: boulder#130, acme-spec#110
-        # self.assertRaises(errors.NetworkError, self.net.answer_challenge,
-        #                  self.challr.body, challenges.DNSResponse())
+        self.assertRaises(errors.NetworkError, self.net.answer_challenge,
+                          self.challr.body, challenges.DNSResponse())
 
     def test_retry_after_date(self):
         self.response.headers['Retry-After'] = 'Fri, 31 Dec 1999 23:59:59 GMT'