common.nix now sets security.sudo.wheelNeedsPassword = true, but --use-remote-sudo is deprecated and only prefixes commands with sudo -- it never prompts, so every remote rebuild failed. --ask-sudo-password is the alias for --elevate=sudo --ask-elevate-password, which asks once and feeds it via sudo --stdin. This should have gone in with the wheelNeedsPassword change itself. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>