mynixos-config/secrets/generated/ward-kanidm/kanidm-oauth2-paperless.age