nix-config/system/security/default.nix

{
  imports = [
    ./sops.nix
  ];
  security.rtkit.enable = true;
}