Despite having used Nix for several years already, I feel secure in admitting that new concepts in Nix continue to be confusing at first glance. I had avoided doing any secret management for Nix for a long time, largely because I ran Nix atop another...