fix: use individual admins

flake.nix

@@ -153,13 +153,13 @@
           type = "app";
           program = "${pkgs.writeShellScript "bootstrap-host" (
             builtins.replaceStrings
-              [ "@ADMIN_KEYS@" ]
               [
-                (lib.concatMapStringsSep "\n" (key: "      \"${key}\"") (
-                  lib.flatten (
-                    lib.mapAttrsToList (_: userCfg: userCfg.openssh.authorizedKeys.keys or [ ]) siteConfig.adminUsers
-                  )
-                ))
+                "@ADMIN_USERS_JSON@"
+                "@JQ@"
+              ]
+              [
+                (builtins.toJSON siteConfig.adminUsers)
+                "${pkgs.jq}/bin/jq"
               ]
               (builtins.readFile ./scripts/bootstrap-host.sh)
           )}";