infra/module/aspect/base/security.nix

{
  den.aspects = {
    base = {
      nixos = 
        { pkgs, ... }:
        {
          security = {
            sudo-rs.enable = true;
            sudo-rs.wheelNeedsPassword = false;
          };
          systemd.coredump.enable = false;
        };
      };
    };
}