{
  security.auditd.enable = true;
  boot.default = true;
}