security.pam.services.sudo_local.watchIdAuth

Use Apple Watch for sudo authentication, for devices without Touch ID or laptops with lids closed, consider using this.

When enabled, you can use your Apple Watch to authenticate sudo commands. If this doesn't work, you can go into System Settings > Touch ID & Password and toggle the switch for your Apple Watch.