{
  # TODO: Server too
  security = {
    polkit.persistentAuthentication = true;
    run0-sudo-shim.enable = true;
  };
}