password should be required to change fingerprints

Submitted by Ondrej Holy `@oholy`

No password is necessary to config the fingerprint reader. I think this is a security issue:

Persons with physical access can scan their own fingerprint. So they can do everything that is allowed for this specific user.
If the user owns system privileges (sudo) the person has access to the hole system.