{
  # Enable Touch ID authentication for sudo
  security.pam.services.sudo_local.touchIdAuth = true;
}