you can generate a key in the secure enclave then use that with touchid every time to authenticate - see eg. https://nmattia.com/posts/2026-10-19-setting-up-ssh-keys-tou...