{ pkgs, lib, ... }: {
  security = {
    rtkit.enable = true;
    pam.services.hyprlock = {};

    polkit = {
      enable = true;
      adminIdentities = [
        "unix-group:wheel"
      ];
    };
    
    sudo = {
      enable = lib.mkForce false;
    };
   
    sudo-rs = {
      enable = true;
      wheelNeedsPassword = true;
      execWheelOnly = true;
    };
  };

  environment.systemPackages = [
    pkgs.vulnix
  ];
}