1{den, ...}: {
 2  den.aspects.core.includes = [den.aspects.core.sudo];
 3  den.aspects.core.sudo = {
 4    nixos = {
 5      security.sudo = {
 6        enable = true;
 7        extraRules = [
 8          {
 9            commands =
10              map
11              (command: {
12                command = "/run/current-system/sw/bin/${command}";
13                options = ["NOPASSWD"];
14              })
15              [
16                "poweroff"
17                "reboot"
18              ];
19            groups = ["wheel"];
20          }
21        ];
22      };
23    };
24  };
25}