{
  security = {
    doas = {
      enable = true;

      extraRules = [
        {
          users = [ "aethrvmn" ];
          keepEnv = true;
          persist = true;
        }
      ];
    };

    sudo.enable = false;
  };
}