{
  sops.secrets = {
    "msci/taur/sshkey" = {};
    "msci/taur/gpgkey" = {};
    "msci/taur/gpgpwd" = {};
  };
  makeshiftci.enable = true;
}