keys:
  - &public_key age1wkmgn0m8ln5huvqfcxzwprlpvge82hg572vfuclv7natr7hmp5qs672vt9
creation_rules:
  - path_regex: secrets/.*$
    key_groups:
      - age:
          - *public_key