diff --git a/base/default.nix b/base/default.nix
index 10126636..2fb413fb 100644
--- a/base/default.nix
+++ b/base/default.nix
@@ -45,6 +45,11 @@
 
   programs.zsh.enable = true;
 
+  security.sudo.execWheelOnly = true;
+  security.sudo.extraConfig = ''
+    Defaults lecture = never
+  '';
+
   users.groups."drift".name = "drift";
 
   # Trusted users on the nix builder machines