What seems to be a workable config

hosts/darwin/default.nix

@@ -1,9 +1,19 @@
 { agenix, config, pkgs, ... }:
 
-let user = "%USER%"; in
+let user = "olaf"; in
 
 {
 
+security = {
+  pam = {
+    services ={
+      sudo_local ={
+              touchIdAuth = true;
+      };
+    };
+  };
+};
+
   imports = [
     ../../modules/darwin/secrets.nix
     ../../modules/darwin/home-manager.nix
@@ -39,6 +49,7 @@ let user = "%USER%"; in
   environment.systemPackages = with pkgs; [
     emacs-unstable
     agenix.packages."${pkgs.system}".default
+    nixd
   ] ++ (import ../../modules/shared/packages.nix { inherit pkgs; });
 
   launchd.user.agents.emacs.path = [ config.environment.systemPath ];

hosts/nixos/default.nix

@@ -1,6 +1,6 @@
 { config, inputs, pkgs, agenix, ... }:
 
-let user = "%USER%";
+let user = "olaf";
     keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOk8iAnIaa1deoc7jw8YACPNVka1ZFJxhnU4G74TmS+p" ]; in
 {
   imports = [
@@ -303,5 +303,6 @@ let user = "%USER%";
     inetutils
   ];
 
+
   system.stateVersion = "21.05"; # Don't change this
 }