1  { lib, ... }: let
2    inherit (lib) enabled;
3  in {
4    security.pam.services.sudo_local = enabled {
5      touchIdAuth = true;
6    };
7  }