{ ... }:
{
  config.dendritic.features.security-sudo-rs = {
    nixosModules = [
      (
        { config, ... }:
        let
          user = config.dendritic.current.primaryUser;
        in
        {
          security = {
            sudo.enable = false;
            sudo-rs = {
              enable = true;
              execWheelOnly = true;
              wheelNeedsPassword = true;
            };
          };

        }
      )
    ];
  };
}