users.extraUsers = {
    clever = {
      home = "/home/clever";
      isNormalUser = true;
      extraGroups = [ "wheel" "wireshark" "vboxusers" ];
      uid = 1000;
      openssh.authorizedKeys.keys = with keys; [ clever.amd keys.ramboot clever.laptop ];
      initialHashedPassword = passwords.hashedPw;
    };
  };
  users.extraGroups.wireshark.gid = 500;
  security.setuidOwners = [
    { program = "dumpcap";
      owner = "root";
      group = "wireshark";
      setuid = true;
      setgid = false;
      permissions = "u+rx,g+x";
    }
  ];