{
  mkKdeDerivation,
  pkg-config,
  signond,
}:
mkKdeDerivation {
  pname = "signon-kwallet-extension";

  extraNativeBuildInputs = [ pkg-config ];
  extraBuildInputs = [ signond ];

  # NB: not actually broken, just makes it install to $out instead of $signon/lib/extensions
  # This is useless without a wrapped signond.
  # FIXME: wrap signond with SSO_EXTENSIONS_DIR=$wrapper/lib/extensions
  extraCmakeFlags = [ "-DINSTALL_BROKEN_SIGNON_EXTENSION=1" ];
}