{
  pkgs,
  unstablePkgs,
  ...
}: {
  # allow unfree
  environment.systemPackages = with pkgs; [
    pinentry
    yubikey-personalization
    yubikey-personalization-gui
    openssl
    pass
    browserpass
    #bitwarden-cli
  ];
  services.udev.packages = [pkgs.yubikey-personalization];

  #gpg
  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
  };
  programs.browserpass.enable = true;
}