big great refactor

modules/nixos/services/security/default.nix

@@ -0,0 +1,23 @@
+{
+  pkgs,
+  ...
+}:
+
+{
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = false;
+  };
+
+  security.wrappers = {
+    gsr-kms-server = {
+      source = "${pkgs.gpu-screen-recorder}/bin/gsr-kms-server";
+      capabilities = "cap_sys_admin+ep";
+      owner = "root";
+      group = "root";
+      permissions = "u+rx,g+rx,o+rx";
+    };
+  };
+
+  services.gnome.gnome-keyring.enable = true;
+}