{
  lib,
  pkgs,
  ...
}: let
  inherit (lib.modules) mkForce;
in {
  users.defaultUserShell = pkgs.zsh;
  security.sudo.wheelNeedsPassword = mkForce false;
}