···

       
32
       
32
       
 
       
        ];

     

       
33
       
33
       
 
       
        trusted-users = [ "root" "@wheel" ];

     

       
34
       
34
       
 
       
        allowed-users = [ "root" "@wheel" "${user}" ];

     

       
35
       
35
       
+
       
        extra-trusted-users = [ "${user}" ];

     

       
35
       
36
       
 
       
        # on Apple Silicon, Rosetta 2 allows for this

     

       
36
       
37
       
 
       
        extra-platforms = mkIf (helpers.system == "aarch64-darwin") [ helpers.system "x86_64-darwin" ];

     

       
37
       
38
       
 
       
      };