{ #
  # bots
  #
  deploy = {
    isNormalUser = true;
    home = "/home/deploy";
    openssh.authorizedKeys.keyFiles = [ ./keys/deploy.pub ];
    extraGroups = [ "wheel" ];
  };
  #
  # humans
  #
  root.openssh.authorizedKeys.keyFiles = [ ./keys/ben.pub ];
  ben = {
    description = "Ben Sima";
    isNormalUser = true;
    home = "/home/ben";
    openssh.authorizedKeys.keyFiles = [ ./keys/ben.pub ];
    extraGroups = [ "wheel" "networkmanager" "docker" ];
  };
  nick = {
    description = "Nick Sima";
    isNormalUser = true;
    home = "/home/nick";
    openssh.authorizedKeys.keyFiles = [ ./keys/nick.pub ];
    extraGroups = [ "docker" ];
  };
}