cnix/system/etc/security/default.nix

{
  security = {
    rtkit.enable = true;
    pam.services.hyprlock.text = "auth include login";
  };
}