diff --git a/hosts/best/garage/default.nix b/hosts/best/garage/default.nix
index 6eba893..248a29c 100644
--- a/hosts/best/garage/default.nix
+++ b/hosts/best/garage/default.nix
@@ -13,7 +13,7 @@ in {
   secrets.garageEnvironment.file  = ./environment.age;
 
   services.garage = enabled {
-    package = pkgs.garage_1_0_1;
+    package = pkgs.garage_1_x;
 
     environmentFile = config.secrets.garageEnvironment.path;
 
diff --git a/modules/darwin/sudo.nix b/modules/darwin/sudo.nix
new file mode 100644
index 0000000..0676ab9
--- /dev/null
+++ b/modules/darwin/sudo.nix
@@ -0,0 +1,7 @@
+{ lib, ... }: let
+  inherit (lib) enabled;
+in {
+  security.pam.services.sudo_local = enabled {
+    touchIdAuth = true;
+  };
+}