{pkgs, ...}: {
  security.pam.services.greetd.enableGnomeKeyring = true;
  environment.systemPackages = with pkgs; [
    sops
    age
    ssh-to-age
  ];
}