{ pkgs, user, config, ... }:
{
  security.sudo.wheelNeedsPassword = false;
  users.users = {
    root.hashedPasswordFile = config.age.secrets.root-pw.path;
    price = {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
      shell = pkgs.bash;
      openssh.authorizedKeys.keys = [
        "no-touch-required sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJ9ODXLAIfGH/7VNobQsp5nwBvNoh+pQMEH7s2jkHpkqAAAACHNzaDpsdW5h"
      ];
    };
  };
}