{ user, home }:
{ ... }:
{
  home-manager.users.${user}.programs.ssh = {
    enable = true;
    enableDefaultConfig = false;
    matchBlocks."*".identitiesOnly = true;
  };
}