{ self, inputs, ... }:
{
  perSystem =
    { pkgs, ... }:
    {
      packages.ssh-yubikey =
        (inputs.wrappers.lib.wrapPackage {
          pkgs = pkgs;
          package = pkgs.openssh;
          env = {
            KEYS_DIR = "${self}/keys";
            SSH = "${pkgs.openssh}/bin/ssh";
          };
          runtimeInputs = with pkgs; [
            age
            age-plugin-yubikey
            age-plugin-fido2-hmac
            yubikey-manager
            libfido2
            self.packages.${pkgs.system}.age-detect
          ];
          wrapper =
            { envString, ... }:
            ''
              ${envString}
              ${builtins.readFile ./ssh-yubikey}
            '';
        }).overrideAttrs
          { passthru.usage = builtins.readFile ./usage.kdl; };
    };
}