Secrets paths have been discussed for a very long time. The problem is that encryption or ACLs are pretty much incompatible with the current model of world-readable Nix store and reproducibility, so they’re far from easy to implement.
1 Like