{...}: {
  # otherwise swaylock can't access the user password.
  security.pam.services.swaylock = {};
}