{ config, lib, ... }:
{
  options.modules.guest.enable = lib.mkEnableOption "nested guest configuration";

  config = lib.mkIf config.modules.guest.enable {
    modules.network.ssh.enable = lib.mkDefault false;
    modules.network.ssh.hostKeys.restore = lib.mkDefault false;
  };
}