nix-config/hosts/common/security.nix

{ inputs, config, pkgs, lib, ... }:

{
  security = {
    unprivilegedUsernsClone = true; # Needed for rootless podman
    sudo.extraConfig = ''
      Defaults lecture = never
    '';
  };
}