macOS: enabling TouchID for sudo