What a clusterfuck

modules/system/programs/security/apparmor/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  security.apparmor.enable = true;
+}

modules/system/programs/security/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  imports = [
+    ./apparmor
+    ./doas
+    ./gnome-keyring
+    ./polkit
+  ];
+}

modules/system/programs/security/doas/default.nix

@@ -0,0 +1,16 @@
+{ ... }:
+{
+  security = {
+    sudo.enable = false;
+    doas = {
+      enable = true;
+      extraRules = [
+        { # Give wheel root access
+          groups = ["wheel"];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
+    };
+  };
+}

modules/system/programs/security/gnome-keyring/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  services.gnome.gnome-keyring.enable = true;
+}

modules/system/programs/security/polkit/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  security = {
+    polkit.enable = true;
+    rtkit.enable = true;
+  };
+}