{pkgs, ...}: {
  services.fprintd = {
    enable = true;
  };

  security.polkit.enable = true; # TODO needed?

  security.pam.services.swaylock.text = ''
    auth            sufficient      pam_unix.so try_first_pass likeauth nullok
    auth            sufficient      pam_fprintd.so
  '';
}