let
  remote = "ssh-ed25519 AAAA..."; # Remote server's SSH host public key
in
{
  "pi-api-key.age".publicKeys = [ remote ];
  "pi-inbound-api-key.age".publicKeys = [ remote ];
  "discord-token.age".publicKeys = [ remote ];
  "discord-webhook-secret.age".publicKeys = [ remote ];
  "rss-webhook-secret.age".publicKeys = [ remote ];
  "zulip-api-key.age".publicKeys = [ remote ];
  "zulip-webhook-secret.age".publicKeys = [ remote ];
  "matrix-access-token.age".publicKeys = [ remote ];
  "matrix-webhook-secret.age".publicKeys = [ remote ];
}