/nixos/systems/*/secrets.yaml diff=sopsdiffer