Run the tmux server in the GUI session so ssh panes can read Keychain
Lets remote terminal sessions use stored passwords and browser tools as if you were at the desk.
how it works
ssh shells get 'User interaction is not allowed' from Keychain; start tmux via launchd in the Aqua session and always attach; grant FDA to tmux since TCC now attributes to it.
Technique: A pattern or hard-won lesson, written down so it isn't learned twice.
The code for this one lives in a private repo. This page explains the idea so you can build your own.