I don't have one of the new macbooks, but wouldn't making a wrapper around the macOS authorization services thing do this as well? Something like: osascript -

I don't have one of the new macbooks, but wouldn't making a wrapper around the macOS authorization services thing do this as well? Something like: osascript -e "do shell script \"$*\" with administrator privileges"