yeah. that part. ought to also be in `nix.conf`.
I , uh, really don't understand why it's even possible to add that as a flake attribute. because it's just straight up not useful. in any properly configured nix system, it *will* be ignored, unless ran as a trusted user (== root privileges; note that on NixOS this is stronger than `@wheel` because a trusted user can just overwrite the sudo binary and reboot. no password needed). and this is not a bug, because trusted public keys do indicate absolute trust. they really do actually *need* to be nontrivial to add.