What seems to be a workable config

hosts/darwin/default.nix

@@ -1,9 +1,19 @@
 { agenix, config, pkgs, ... }:
 
-let user = "%USER%"; in
+let user = "olaf"; in
 
 {
 
+security = {
+  pam = {
+    services ={
+      sudo_local ={
+              touchIdAuth = true;
+      };
+    };
+  };
+};
+
   imports = [
     ../../modules/darwin/secrets.nix
     ../../modules/darwin/home-manager.nix
@@ -39,6 +49,7 @@ let user = "%USER%"; in
   environment.systemPackages = with pkgs; [
     emacs-unstable
     agenix.packages."${pkgs.system}".default
+    nixd
   ] ++ (import ../../modules/shared/packages.nix { inherit pkgs; });
 
   launchd.user.agents.emacs.path = [ config.environment.systemPath ];