{ pkgs, config, lib, ... }: let
  cfg = config.grimmShared;
in {
  config = with cfg; lib.mkIf (enable && tooling.enable && tooling.pass) {
    security.polkit.enable = true;

    environment.systemPackages = with pkgs; [
      mkpasswd
      pinentry
      gnupg
      pass
      libsecret
      (writeShellScriptBin "passw" "pass $@")
    ] ++ lib.optionals cfg.graphical [
      lxqt.lxqt-policykit
    ];

    services.passSecretService.enable = true;
    programs.gnupg.agent = {  
      settings = {
#        default-cache-ttl = 6000;
      };
      pinentryPackage = lib.mkDefault pkgs.pinentry;
      enable = true;
      # enableSSHSupport = true;
    };
  };
}