but the idea is simple: it is just a daemon that reads /dev/input/by-path/platform-i8042-serio-0-event-kbd so there is no way to inject a fake key press programmatically. I wrote this to test how to make a variant of sudo that would not expose my password to all X clients: