https://nix-community.github.io/nixos-anywhere/howtos/secrets.html