reNixos/s0mePC-nix/nix/settings/allowed-users.nix

{...}: {
    nix = {
        settings = {
            sandbox = true;
            allowed-users = [
                "@wheel"
            ];
        };
    };
}