{ config, pkgs, lib, ... }:

let
  cfg = config.homeModules.security;
in

lib.mkIf cfg.enable {

  programs.gpg = {
    enable = true;
    mutableKeys = true; # allow changes in keys or trust
    mutableTrust = true;
    #publicKeys = [
    #  {
    #    source = ""; #./path/to/key.a;
    #    trust = "ultimate";
    #  }
    #];
  };

  programs.ssh = {
    enable = true;
    addKeysToAgent = "yes"; # let home manager manage ssh keys
  };

}