{ ... }:
{
  services.systemd-lock-handler.enable = true;
}