coreauthd #

 full_path = "/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd"
 runs_as = "mobile"

coreauthd is a system daemon or agent that provides LocalAuthentication services. It maintains the authenticated contexts and presents the authentication user interface.