{ config, pkgs, ... }:
{
  security = {
    doas = {
      enable = true;
      extraConfig = "permit nopass keepenv :wheel";
    };  
  };
}