{ pkgs, lib, config, ... }:

with lib;
let 
  cfg = config.modules.security;

in 
{ options.modules.security = { enable = mkEnableOption "security"; };
  config = mkIf cfg.enable {
    home.packages = with pkgs; [
      pass wireguard-tools ipscan protonmail-bridge
      gnome.gnome-keyring
    ]; 
  };
}