dot_files/dot_local/bin/executable_bw-vault

#!/bin/bash
# User-facing wrapper — triggers Touch ID via sudo → runs privileged bw operation
sudo /usr/local/bin/bw-vault-unlock "$@"