On my Mac, every sudo requires either my fingerprint or password, and times out immediately.

Colleague recently told me his agent tried to sudo. It failed but it saw that docker with root is available and just used that. I don't quite remember what it did, I think editing something in /etc.