diff --git a/.gitea/ISSUE_TEMPLATE.md b/.gitea/ISSUE_TEMPLATE.md
index 8785e7d..66ebe47 100644
--- a/.gitea/ISSUE_TEMPLATE.md
+++ b/.gitea/ISSUE_TEMPLATE.md
@@ -65,6 +65,9 @@ in place.
 
 - [ ] Aerospace
 - [ ] Alfred
+- [ ] Dictionary
+  - [ ] Enable Webster's 1913 dictionary
+  - [ ] Set Webster's 1913 as the first dictionary
 - [ ] Safari
   - [ ] Tab layout: Compact (Settings -> Tabs)
   - [ ] Show features for web developers (Settings -> Advanced)
diff --git a/local/Brewfile b/local/Brewfile
index ec721e4..e1e57d8 100644
--- a/local/Brewfile
+++ b/local/Brewfile
@@ -106,9 +106,10 @@ cask "vmware-fusion"
 cask "zoom"
 cask "zotero"
 
-mas "1Password for Safari", id: 1569813296
-mas "GoodNotes", id: 1444383602
-mas "Little Snitch Mini", id: 1629008763
-mas "PDF Viewer", id: 1120099014
-mas "Shareful", id: 1522267256
-mas "Xcode", id: 497799835
+# TODO Don't assume shared Apple accounts
+# mas "1Password for Safari", id: 1569813296
+# mas "GoodNotes", id: 1444383602
+# mas "Little Snitch Mini", id: 1629008763
+# mas "PDF Viewer", id: 1120099014
+# mas "Shareful", id: 1522267256
+# mas "Xcode", id: 497799835
diff --git a/local/defaults.yml b/local/defaults.yml
index 12d08af..829b267 100644
--- a/local/defaults.yml
+++ b/local/defaults.yml
@@ -131,7 +131,7 @@
       - # set the icon size to 36 pixels
         domain: com.apple.dock
         key: tilesize
-        type: float
+        type: int
         value: 36
       - # no dock delay
         domain: com.apple.dock
diff --git a/local/macos.yml b/local/macos.yml
index 49e25a4..4c7185d 100644
--- a/local/macos.yml
+++ b/local/macos.yml
@@ -28,7 +28,7 @@
       vars:
         dest: "{{ jj_config_path_user.stdout }}"
 
-    # TODO Initialize ~/src/boxen to use jj
+  # TODO Initialize ~/src/boxen to use jj
 
 - import_playbook: defaults.yml
 
@@ -90,5 +90,39 @@
         state: link
       with_fileglob: ~/.dotfiles/macos/colors/*
 
+    - name: Install Webster's 1913 dictionary
+      ansible.builtin.copy:
+        src: ~/.dotfiles/macos/websters-1913.dictionary/
+        dest: ~/Library/Dictionaries/websters-1913.dictionary
+        mode: "644"
+
+- tags: system
+  hosts: macos
+  tasks:
+
+    - name: Enable Touch ID for sudo
+      become: true
+      ansible.builtin.lineinfile:
+        path: /etc/pam.d/sudo
+        insertafter: '^auth\s+sufficient'
+        regexp: '^auth\s+sufficient\s+pam_tid.so$'
+        line: "auth       sufficient     pam_tid.so"
+
+    - name: Enable Touch ID for sudo in tmux
+      become: true
+      ansible.builtin.lineinfile:
+        path: /etc/pam.d/sudo
+        insertbefore: '^auth\tsufficient\tpam_tid.so'
+        regexp: '^auth\s+optional\s+.*pam_reattach.so$'
+        line: "auth       optional       /opt/homebrew/lib/pam/pam_reattach.so"
+
+    # https://infosec.exchange/@briankrebs/111434555426146154
+    - name: Change TTL to 65 for fooling tethering detection
+      become: true
+      ansible.builtin.command: sysctl -w {{ item }}=65
+      loop:
+        - net.inet.ip.ttl
+        - net.inet6.ip6.hlim
+      changed_when: true
 
 # vim: set ft=yaml.ansible