global(pam): semi-enable (document) rssh cue

Changed files
+5 -1
global
programs
security
+5 -1
global/programs/security/pam.nix
···
lib.mkMerge [
(lib.mkIf (!config.gensokyo.traits.sensitive) {
security.pam = {
-
rssh.enable = true;
+
rssh = {
+
enable = true;
+
# not released yet :moai:
+
# settings.cue = true;
+
};
services.sudo.rssh = true;
};