{
  config,
  lib,
  pkgs,
  ...
}: {
  security.sudo.wheelNeedsPassword = false;
}