feat: add a setting for sudo over ssh

src/core/settings.cpp

@@ -50,6 +50,7 @@ Settings Settings::load(const QString &path)
     s.maxFailures = kv.integer(QStringLiteral("MaxFailures"), s.maxFailures, 1, 20);
     s.lockoutMinutes = kv.integer(QStringLiteral("LockoutMinutes"), s.lockoutMinutes, 1, 24 * 60);
     s.skipLidClosed = kv.boolean(QStringLiteral("SkipLidClosed"), s.skipLidClosed);
+    s.sshSessions = kv.boolean(QStringLiteral("SshSessions"), s.sshSessions);
     s.adapt = kv.boolean(QStringLiteral("Adapt"), s.adapt);
     return s;
 }

src/core/settings.h

@@ -44,6 +44,10 @@ struct Settings {
     int lockoutMinutes = 15;
     // A laptop with the lid shut has its camera looking at the keyboard.
     bool skipLidClosed = true;
+    // sudo and admin prompts in an SSH session. Off by default: whoever sits
+    // in front of the camera need not be whoever types. On, that person still
+    // has to be at the machine (see the PAM module).
+    bool sshSessions = false;
     // Take in a little of each confident unlock, so a new haircut or a pair
     // of glasses does not need a new setup. Face ID does the same.
     bool adapt = true;