nixcfg/cluster/prod/app/secretmgr.py