Is it possible to use an Apple Watch to authorise sudo in Catalina?
There is a PAM module for this on GitHub:

https://github.com/biscuitehh/pam-watchid

(This is forked from a TouchID PAM module, btw.)