nix-config/modules/secrets/sso/auth-key.age