services/fprintd: update config+persist

services/fprintd.nix

@@ -5,25 +5,13 @@
 }:
 with lib;
 mkIf (elem "fprintd" config.machine.services) {
-  security.pam.services =
-    let
-      unlock = [
-        "sudo"
-        "i3lock"
-        "login"
-        "lightdm"
-      ];
-    in
-    listToAttrs (
-      forEach unlock (n: {
-        name = n;
-        value = {
-          fprintAuth = true;
-        };
-      })
-    );
-
   services.fprintd = {
     enable = true;
   };
+
+  # Do not allow login/unlock with fingerprint
+  security.pam.services = {
+    "login".fprintAuth = false;
+    "swaylock".fprintAuth = false;
+  };
 }