infra/module/aspect/base/security.nix

{
  den.aspects = {
    base = {
      nixos = 
        { pkgs, ... }:
        {
          security = {
            sudo-rs.enable = true;
            sudo-rs.wheelNeedsPassword = false;
          };
        };
      };
    };
}