A PAM plugin for authenticating using the new kLAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch API in macOS 10.15, written in Swift.
$ sudo make install
/etc/pam.d/sudoto include as the first line:
auth sufficient pam_watchid.so "reason=execute a command as root"
Note that you might have other
auth, don't remove them.