let
  # Only myself
  user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
  users = [user];

  # Current host
  distrust = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVvvjL4XXn6z0fOZnr1v0twoVBINi1FOES15JL/3vU4 root@distrust";
  distrust-mini = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINgxoVszschZv6VDS0OafbdQhre6miig1rlFwFdo6FfZ root@distrust-mini";
  systems = [distrust distrust-mini];

  all = users ++ systems;
in {
  # Multi-service secrets
  "borg_ed25519".publicKeys = all;
  "borg_pass".publicKeys = all;

  # Service-specific secrets
  "bind_pw".publicKeys = all;
  "nextcloud-admin-pass".publicKeys = all;
  "prosody.env".publicKeys = all;
  "vaultwarden.env".publicKeys = all;
  "lldap_root_pass".publicKeys = all;

  # Hidden service secret keys
  "hidden_service/akkoma".publicKeys = all;
  "hidden_service/forgejo".publicKeys = all;
  "hidden_service/lldap".publicKeys = all;
  "hidden_service/microbin".publicKeys = all;
  "hidden_service/nextcloud".publicKeys = all;
  "hidden_service/site".publicKeys = all;
  "hidden_service/uptime-kuma".publicKeys = all;
  "hidden_service/vaultwarden".publicKeys = all;
}