configuration.nix/system.rico/security.nix

{ ... }: {
  security.sudo.wheelNeedsPassword = false;
}