You could do this as a launchd service, which will run as root and will happen automatically with startup. No sudo nor brew required.

See /Library/LaunchDaemons and launchctl.