{
  config,
  lib,
  ...
}:
with lib;
  mkIf (elem "fprintd" config.machine.services) {
    security.pam.services = let
      unlock = [
        "sudo"
        "i3lock"
        "login"
        "lightdm"
      ];
    in
      listToAttrs (forEach unlock (n: {
        name = n;
        value = {fprintAuth = true;};
      }));

    services.fprintd = {
      enable = true;
    };
  }