I'm amazed this is so complicated. I recently used https://github.com/sekey/sekey to set up SSH with TouchID on a mac, and was really surprised how simple it was.