{
  config,
  username,
  pkgs,
  ...
}:
{
  users = {
    users = {
      ${username} = {
        isNormalUser = true;
        createHome = true;
        hashedPasswordFile = config.sops.secrets."users_password/beastie".path;
        description = "Admin account";
        extraGroups = [
          "wheel"
          "audio"
          "video"
        ];
        openssh.authorizedKeys.keys = [
          config.sops.secrets."ssh_keys/beastie_priv".path
        ];
        shell = pkgs.zsh;
      };
      root = {
        password = null;
      };
    };
    mutableUsers = false;
  };
}