configuration.nix/hosts/wynne/security.nix

_: {
  security = {
    sudo = {
      wheelNeedsPassword = false;
    };
    polkit.enable = true;
    rtkit.enable = true;
  };
}