mkEnableOption prepends "Whether to enable" to text, so this became "Whether to enable Enables fscrypt ..."
security.sudo.package = pkgs.sudo-rs;