{ ... }:

{
  security = {
    sudo.enable = false;
    sudo-rs.enable = true;
    pam.services.swaylock = { };
  };
}