{ pkgs, lib, config, ... }:
with lib;
let cfg = config.modules.security;
in
{
  options.modules.security = { enable = mkEnableOption "security"; };

  config = mkIf cfg.enable {
    environment.systemPackages = with pkgs; [ openssl pass age ];
  };

}

