FR: Mandatory authentication for tailscale lock actions on client

### What are you trying to do?

At present, you can perform actions such as signing a new node at the click of a button or running of a command.

There should be an option to mandate authentication to do so, e.g. biometrics or password ?

### How should we solve this?

_No response_

### What is the impact of not solving this?

_No response_

### Anything else?

_No response_