{ pkgs, lib, config, ... }:

with lib;
let 
  cfg = config.modules.security;

in 
{ options.modules.security = { enable = mkEnableOption "security"; };
  config = mkIf cfg.enable {
    home.packages = with pkgs; [
      keepassxc wireguard-tools 
      ipscan pass 
    ]; 
  };
}