Sudo with Touch ID

[[Lesser Known Trick]]

sudo vim /etc/pam.d/sudo

  # sudo: auth account password session
+ auth       sufficient     pam_tid.so
  auth       sufficient     pam_smartcard.so
  auth       required       pam_opendirectory.so
  account    required       pam_permit.so
  password   required       pam_deny.so
  session    required       pam_permit.so