{...}: {
  # TASK: new device
  hardware.opinionatedDisk.diskId = "usb-SanDisk_Extreme_Pro_12345978EC62-0:0";
  hardware.opinionatedDisk.encrypted = true;
  hardware.enableRedistributableFirmware = true;
}