{ config, lib, ... }:
{
  nix.settings = {
    trusted-users = lib.mkForce [ "@admin" "${config.system.primaryUser" ];
  };
}