How a Mac App Locker Actually Works (and Why the Obvious Approach Fails)

macOS still has no public API for "lock this one app behind biometrics." You can lock the whole machine. You can put a whole user account behind Touch ID. You cannot say "let everything else run, but