{ config, lib, pkgs, ... }:
let cfg = config.profiles.security;
in
{
  options.profiles.security = {
    enable = lib.mkEnableOption
      "Profile for security-related packages";
  };

  config = lib.mkIf cfg.enable {
    home.packages = [
      pkgs.yubikey-manager
      pkgs.age-plugin-yubikey

      pkgs.keepassxc
      pkgs.bitwarden
    ];
  };
}