Okay, that’s it for sudo, but what if you want to login using facial recognition into gdm? Well, that’s another topic. First off, you’ll need to edit the passwrod_auth.pam file and add the magical sufficient entry from the arch wiki or here. After that, if you lock your session and try to log back in you’ll see that there’s an unknown error 1 reported to gdm from howdy. After some digging, the solution turned out to be selinux - fedora and other redhat based distors run it in enforcing mode all the time - you can follow this page to stop it. I’ll update this thread when I find a more elegant solution