{ config, ... }: { users = { mutableUsers = false; users.frank = { isNormalUser = true; description = "Frank LoTurco"; hashedPasswordFile = config.sops.secrets.password_hash.path; extraGroups = [ "wheel" ]; }; }; }