{
  security.pam.services.k3t.kwallet.enable = true;
  security.pam.services.k3t.kwallet.forceRun = true;
}