{
  config,
  lib,
  ...
}: let
  persistentLecture = !config.sils.sudo.persistentLecture.disable;
in {
  options.sils.sudo.persistentLecture.disable = lib.mkEnableOption "sudo lecture after every boot";
  config = {
    security.sudo = {
      enable = true;
    };
    environment.persistence.${config.sils.meta.globalDataDir}.files = lib.mkIf persistentLecture [
      {
        file = "/var/db/sudo/lectured/${builtins.toString config.users.users.sils.uid}";
        parentDirectory = {
          user = "root";
          group = config.users.users.sils.group;
          mode = "0600";
        };
      }
    ];
  };
}