{ lib, config, ... }:
{
  security.pam.loginLimits = lib.mkIf config.system.desktop.enable [
    {
      domain = "@users";
      item = "rtprio";
      type = "-";
      value = 1;
    }
  ];
}