configuration.nix/hosts/rico1/security.nix

_: {
  imports = [ ../shared/certs ];
  security = {
    sudo = {
      wheelNeedsPassword = false;
    };
    polkit.enable = true;
  };
}