nixfiles/profiles/base/access.nix

{lib, ...}: let
  inherit (lib.modules) mkForce;
in {
  security.sudo.wheelNeedsPassword = mkForce false;
}