keys:
  # Replace with your actual GPG fingerprint: gpg --list-secret-keys --keyid-format LONG
  - &sonja_gpg REPLACE_WITH_GPG_FINGERPRINT

creation_rules:
  - path_regex: secrets/.*\.yaml$
    key_groups:
      - pgp:
          - *sonja_gpg