One could see fingerprint and user/pw as two different roles - with different levels of authorisation.

(Somehow similar to sudo which asks for the user's password the first time but assumes that the logged in user is allowed to execute further sudo commands without pw auth. Even if sudo does not really implement two different user roles here.)