#agenix file paths are encrypted files that are stored in the Nix store, st they re you only decrypted on when systemctl starts the service , runtime
very cool