security.pam.services.i3lock-color.text = pkgs.lib.mkDefault( pkgs.lib.mkAfter "auth optional pam_exec.so expose_authtok /home/name/bin/sso-gpg" );