{ pkgs, config, lib, ... }:
let
  cfg = config.grimmShared;
in
{
  config = with cfg; lib.mkIf (enable && tooling.enable && tooling.pass) {
    security.polkit.enable = true;

    environment.systemPackages = with pkgs; [
      mkpasswd
      pinentry
      gnupg
      pass
      libsecret
      (writeShellScriptBin "passw" "pass $@")
    ] ++ lib.optional graphical lxqt.lxqt-policykit;

    services.passSecretService.enable = true;
    programs.gnupg.agent = {
      settings = {
        # default-cache-ttl = 6000;
      };
      pinentryPackage = lib.mkForce pkgs.pinentry;
      enable = true;
    };
  };
}