secrets.nix
**/*.secret
/hosts/nio