diff --git a/machines/loki/configuration.nix b/machines/loki/configuration.nix
index 3204d43..97426ca 100644
--- a/machines/loki/configuration.nix
+++ b/machines/loki/configuration.nix
@@ -190,10 +190,12 @@
     };
   };
 
-  security.pam.u2f = {
-    enable = true;
-    # interactive = true;
-    cue = true;
+
+  security = {
+    sudo-rs = {
+      enable = true;
+    };
+    sudo.enable = false;
   };
 
   systemd.network = {
@@ -320,11 +322,13 @@
 
     openssh.enable = true;
 
+    colord.enable = true;
+
     udisks2 = {
       enable = true;
     };
 
-    envfs.enable = true;
+    envfs.enable = false;
     cpupower-gui.enable = true;
     teamviewer.enable = true;
     tailscale.enable = true;
diff --git a/machines/mimir/configuration.nix b/machines/mimir/configuration.nix
index 64d82a8..ca9ede2 100644
--- a/machines/mimir/configuration.nix
+++ b/machines/mimir/configuration.nix
@@ -178,6 +178,11 @@
     cpuFreqGovernor = "ondemand";
   };
 
+  security = {
+    sudo.enable = false;
+    sudo-rs.enable = true;
+  };
+
   systemd.network = {
     enable = true;