ssh agent on Mac Os - no prompt for password after the first connection

Thank you very much for your answer.

I can see the approach taken and its solid reasoning.

Our concerns with that approach are still, that if someone is knowledgeable with how it works, could argue that, when people get away from their workplace (forgetting to lock their Machine or Vault) - someone else could use their machine by just closing the lid, and and they can establish new connections to every other system, just by clicking the "authorize" button.

I think either a toggle-able option which makes it to prompt for the password for all new connections when no Touch ID is available, or a function with locks the vault on lid closure would solve this.

We would prefer to use 1Password, instead of proprietary access control. But we feel, that this quirk could lead to problems in security audits, especially GDPR related ones.