{ ... }:
{
  security.sudo-rs = {
    enable = true;
    execWheelOnly = true;
  };

  # Allow root to be accessed via ssh
  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3B9Uf3h5JiD2HjF/vQ5Zx9pibMgRrlf7ZoBktev9eB Warden"
  ];
}