flocon/system/core/security.nix

{
  security.sudo.wheelNeedsPassword = false;
}