{...}: {
  hardware.cpu.intel.updateMicrocode = true; # Why not?
}