{ config, pkgs, ... }: {
  users.mutableUsers = false; # make users unmutable

  users.users.freenen = {
    isNormalUser = true;
    home = "/home/freenen";
    description = "Finley van Reenen";
    extraGroups = [ "networkmanager" "wheel" ];
    hashedPassword = config.sops.secrets.preUser.freenen;

    # openssh.authorizedKeys.keys = [];
    # packages = with pkgs; [ ];
  };
}