modules.system.security: disable sshAgentAuth, enable rssh

modules/system/security.nix

@@ -34,7 +34,9 @@ inputs:
           };
         };
         yubico = { enable = true; id = "91291"; };
-        sshAgentAuth.enable = true;
+        # TODO: enable cue on next release
+        rssh.enable = true;
+        services.sudo.rssh = true;
         loginLimits =
         [
           { domain = "@users"; item = "nofile"; value = 65536; }

modules/user/chn/default.nix

@@ -60,6 +60,5 @@ inputs:
         pam.yubico.authorizedYubiKeys.ids = [ "cccccbgrhnub" ];
       };
     };
-    # environment.etc."ssh/authorized_keys.d/chn".source = ./id_ed25519_sk.pub;
   };
 }