{ lib, ... }:
{
  users.mutableUsers = lib.mkForce true;
  security.polkit.extraConfig = ''
    polkit.addRule(function(action, subject) {
      if ((action.id == "org.freedesktop.accounts.change-own-password")) {
        return polkit.Result.AUTH_SELF;
      }
    });
  '';
}