[WIP] Many things:

- `gammastep`
- `sudo` with fingerprints that fallbacks to normal password and works
  with `swaylock`

modules/fprintd/default.nix

@@ -0,0 +1,12 @@
+{pkgs, ...}: {
+  services.fprintd = {
+    enable = true;
+  };
+
+  security.polkit.enable = true; # TODO needed?
+
+  security.pam.services.swaylock.text = ''
+    auth            sufficient      pam_unix.so try_first_pass likeauth nullok
+    auth            sufficient      pam_fprintd.so
+  '';
+}