{pkgs, ...}: {
  services.fprintd.enable = true;
  services.fprintd.tod.enable = true;
  services.fprintd.tod.driver = pkgs.libfprint-2-tod1-goodix-550a;

  security.pam.services.login.fprintAuth = true;
  security.pam.services.sudo.fprintAuth = true;
}