{ config, ... }: { security.sudo.wheelNeedsPassword = false; }