{ config, ... }: { sops = with config.constants; { age.sshKeyPaths = privateKeyFiles; defaultSopsFile = sopsFile; }; }