Ran into this today. It looks like valueMeta from this PR addresses exactly this use case: you can now do things like options.security.pam.services.valueMeta.attrs.sddm.configuration.options.enable.definitions.
2 Likes