{
  programs.firejail.enable = true;
}