nixos-config/sops/secrets/gum-dnscrypt-public.key/machines/gum