{pkgs, ...}: {
  environment.systemPackages = with pkgs; [swaylock imagemagick];

  # Provide a system-level helper in /etc/profile.d to point to a lock wrapper
  environment.etc."profile.d/lockwrapper.sh".text = ''
    #!/bin/sh
    export LOCK_WRAPPER="${pkgs.swaylock}/bin/swaylock"
  '';
}