# Enable on server not dev machines
{ ... }:
{
  config.dendritic.features.security-sysctl-strict = {
    features = [
      "security-sysctl-ptrace"
      "security-sysctl-bpf"
      "security-sysctl-debug"
      "security-sysctl-userns"
    ];
  };
}