{ pkgs, config, userSettings, ... }:
{
  # Uses rust-based sudo
  security.sudo-rs = {
    enable = true;
    execWheelOnly = false;
    wheelNeedsPassword = false; # allows sudo without password for those in the wheel group
  };

  users.users.root = {
    isSystemUser = true;
    extraGroups = [
      "wheel"   # needed for sudo without password
      "docker"  # needed for docker without sudo
    ];
    openssh.authorizedKeys.keyFiles = [ ../secrets/authorized_keys ];
  };

  home-manager = {
    useGlobalPkgs = true;
    users.root = {
      home.stateVersion = config.system.stateVersion;
      imports = [ ./home-manager/git.nix ];
      programs.vscode = {
        enable = true;
        package = pkgs.vscode.fhs;
      };
    };
  };
}