{ ... }:
{
  security.lockKernelModules = false;
  services.openssh.extraConfig = ''
    # This is for removing remote gpg-agent's socket
    StreamLocalBindUnlink yes
  '';
}