{...}: {
  users.mutableUsers = false;
  users.users.root = {
    openssh.authorizedKeys.keyFiles = [../ssh.keys];
  };
}