{ ... }:
{
  security.sudo.extraConfig = ''
    Defaults pwfeedback
  '';
}