security/module.nix: add polkit ad apparmor

modules/system/os/security/module.nix

@@ -1,5 +1,18 @@
-_: {
+{pkgs, ...}: {
   imports = [
     ./sudo.nix
   ];
+
+  security = {
+    polkit = {
+      enable = true;
+      package = pkgs.polkit;
+    };
+
+    apparmor = {
+      enable = true;
+      killUnconfinedConfinables = true;
+      packages = [pkgs.apparmor-profiles];
+    };
+  };
 }