{ pkgs, user, config, ... }: {
  security.sudo.wheelNeedsPassword = false;
  users.users = {
    root.hashedPasswordFile = config.age.secrets.users-root-pw.path;
    price = {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
      shell = pkgs.bash;
      hashedPasswordFile = config.age.secrets.users-price-pw.path;
      openssh.authorizedKeys.keys = [
        "no-touch-required sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJ9ODXLAIfGH/7VNobQsp5nwBvNoh+pQMEH7s2jkHpkqAAAACHNzaDpsdW5h"
      ];
    };
  };
  environment.persistence.ephemeral.users = {
    price = { files = [ ".bash_history" ]; };
    root = { home = "/root"; files = [ ".bash_history" ]; };
  };
}