Stops snowfall from giving sudo to guest account

WHY THE FUCK IS THIS A THING BY DEFAULT??

homes/x86_64-linux/friends@gallifrey/default.nix

@@ -23,21 +23,18 @@ in {
   home.packages = with pkgs; [
     xclip wl-clipboard tree unzip
     dosbox retroarchCustom minetest superTuxKart
-    plex-media-player freetube
+    plex-media-player freetube vlc
   ];
 
   programs.firefox = {
     enable = true;
-    nativeMessagingHosts = with pkgs; [
-      browserpass
-    ];
 
     policies = {
       BlockAboutConfig = true;
     };
     profiles.default = {
       extensions = (with pkgs.nur.repos.rycee.firefox-addons; [
-        browserpass ublock-origin libredirect
+        ublock-origin libredirect consent-o-matic
       ]);
       settings = {
         "browser.fixup.domainsuffixwhitelist.lan" = true;

modules/nixos/core/users.nix

@@ -33,6 +33,8 @@ in {
     programs.fish.enable = true;
     users.defaultUserShell = pkgs.fish;
 
+    snowfallorg.user.friends.admin = false; # WTF snowfall? Don't give root by default!!
+
     users.users = (genUsers cfg.admins (name: {
       isNormalUser = true;
       extraGroups = [ "wheel" ];