{ config, lib, ff, ... }: with lib; {
  options.features.disableLocation = mkOption {
    type = types.bool;
    default = false;
    description = ''
      Forbid requests for the users precise location.
      The remote end will still be able to look up the users IP address in a database, for
      an approximate location.
    '';
  };

  config.policies = mkIf config.features.disableLocation {
    Permissions.Location = {
      BlockNewRequests = true;
      Locked = true;
    };

    Preferences = ff.flattenAttrs {
      geo.enabled = false;
    };
  };
}