Authorization via TouchID doesn't work

[ftpd]

I have the following pam configuration:

root@tuonela ~ ❯ cat /etc/pam.d/doas
# doas: auth account password session
auth       include        doas_local
auth       sufficient     pam_smartcard.so
auth       required       pam_opendirectory.so
account    required       pam_permit.so
password   required       pam_deny.so
session    required       pam_permit.so
❯ cat /etc/pam.d/doas_local
auth       sufficient     pam_tid.so

which is 1:1 copy of sudo's pam config. Unfortunately, I can't get TouchID to work, it seems like completely ignored - auth with password works flawlessly.

Is this a supposed behavior?