{lib, ...}: {
  # NOTE: mkDefault is 1000 and mkForce is 50
  # NOTE: so this is like a second mkDefault
  security.sudo.wheelNeedsPassword = lib.mkOverride 900 true;
}