{ den, ... }:
{
  lux.sops-password = den.lib.perUser (
    { user, ... }:
    {
      nixos =
        { config, ... }:
        {
          sops.secrets."hashed-password-${user.userName}".neededForUsers = true;
          users.users.${user.userName}.hashedPasswordFile = config.sops.secrets."hashed-password-${user.userName}".path;
        };
    }
  );
}