{ pkgs, secrets, ... }:
{
    # Make users fully declarative
    users.mutableUsers = false;

    # Set default shell to Zsh
    users.defaultUserShell = pkgs.zsh;
    users.users = {
        # Main ty user
        ty = {
            isNormalUser = true;
            useDefaultShell = true;
            description = "Tyler Beckman";
            extraGroups = [
                "networkmanager" # Can manage networking
                "wheel" # Can use sudo
            ];
            
            hashedPassword = secrets.passwords.users.ty;
        };
    };

    # Enable polkit user authentication
    security.polkit.enable = true;
}