nix-config/modules/secrets/sso/ambroisie/password-hash.age