{config, ...}: let
  inherit (builtins) readFile;
  inherit (config.users.users) user;
in {
  nix = {
    sshServe = {
      enable = true;
      keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
      protocol = "ssh-ng";
      trusted = true;
      write = true;
    };
  };
}