{ adminUser, ... }:
{
  nix.settings.trusted-users = [ "builder" ];

  users.users.builder = {
    openssh.authorizedKeys.keys = with adminUser.userinfo.sshPublicKeys; [
      onepassword
      yubikey-personal-nano
      yubikey-personal-keychain
      yubikey-personal-backup
    ];
    isNormalUser = true;
    group = "nogroup";
  };
}