I enabled fprintd in my configuration.nix and bam - it showed up in the Gnome settings and I scanned a finger a few times.

Now I can sudo without having to think about it (which, granted, might defeat some of sudo's point...).