WIP: implement a secret vars store in nixpkgs#370444

Lassulus wants to merge 2 commits into

NixOS:masterNixOS/nixpkgs:masterfrom

Lassulus:nixos-varsLassulus/nixpkgs:nixos-varsCopy head branch name to clipboard