{ config, lib, pkgs,... }:

{
  security.sudo.execWheelOnly = true;
}