{config, ...}: {
  nix = let
    inherit (builtins) readFile;
    inherit (config.users.users) user;
  in {
    sshServe = {
      enable = true;
      keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
      # protocol = "ssh-ng";
      trusted = true;
      write = true;
    };
  };
  security.pam.sshAgentAuth.enable = true;
}