{ lib, config, ... }:
{
  config = lib.mkIf config.osbmModules.security.enable {
    # Security hardening
    security.sudo.wheelNeedsPassword = lib.mkDefault true;

    # Polkit for privilege escalation
    security.polkit.enable = lib.mkDefault true;

    # Additional security settings can be added here
  };
}