nix-config/hosts/common/optional/secure-boot.nix

{pkgs, ...}: {
  environment.systemPackages = with pkgs; [sbctl];
}