{ config, secrets, ... }:
{
  users = {
    groups.${config.modules.primaryUser} = { };

    users =
      let
        defaultOptions = {
          initialHashedPassword = secrets.initial_hashed_password;
          openssh.authorizedKeys.keys = [ secrets.kioku_openssh_public_key ];
        };
      in
      {
        root = defaultOptions;

        ${config.modules.primaryUser} = defaultOptions // {
          group = config.modules.primaryUser;
          isNormalUser = true;
        };
      };
  };
}