use flake
export SOPS_PGP_FP="3AC6F170F01133CE393BCD94BE948AFD7E7873BE"