{lib, ...}: {
  imports = [./pub-keys.nix];
  options = {
    pub-keys.ssh = lib.mkOption {
      type = lib.types.attrsOf lib.types.str;
      default = {};
      description = "set of public keys as `name = key`";
    };
  };
}