{
lib,
config,
pkgs,
...
}:
with lib;
let
enabled = any (user: user.modules.waylock.enable) (attrValues config.home-manager.users);
in
config = mkIf enabled { security.pam.services.waylock = { }; };
}