major refactor

mod/desktop/security.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.hd.desktop.security;
+  inherit (lib) mkEnableOption mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    security.pam = {
+      services.login.enableGnomeKeyring = true;
+    };
+    services = {
+      gnome.gnome-keyring.enable = true;
+    };
+    programs.seahorse.enable = true;
+  };
+}