{ ... }: { users.users.frank = { isNormalUser = true; group = "frank"; openssh.authorizedKeys.keys = [ (builtins.readFile ./ssh.pub) ]; }; users.groups.frank = {}; }