{ ... }: 
{
  security = {
    rtkit.enable = true;
    sudo.enable = true;
    pam.services.swaylock = { };
  };
}