1{den, ...}: {
 2  den.aspects.core.security.includes = [den.aspects.core.security.storage];
 3  den.aspects.core.security.storage = {
 4    nixos = {
 5      environment.etc."udisks2/mount_options.conf".text = ''
 6        [defaults]
 7        defaults=nodev,nosuid,noexec
 8      '';
 9    };
10  };
11}