{config, ...}: {
  sops = with config.constants; {
    age.sshKeyPaths = privateKeyFiles;
    defaultSopsFile = sopsFile;
  };
}