{ pkgs, ... }:
with pkgs;
{
  security.sudo.enable = lib.mkForce false;
  networking = {
    useHostResolvConf = lib.mkForce false;
  };
}