1 2 3 4 5 6 7
{ security.sudo = { enable = true; execWheelOnly = true; wheelNeedsPassword = false; }; }