From f60746284616e1c6a8f7384de9ebad059c56841f Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 04:09:54 -0700
Subject: [PATCH 1/6] add age to devshell

---
 flake.nix                                 |   1 +
 secrets/master-keyed/keytabs/amethyst.age | Bin 0 -> 1692 bytes
 2 files changed, 1 insertion(+)
 create mode 100644 secrets/master-keyed/keytabs/amethyst.age

diff --git a/flake.nix b/flake.nix
index f22c5eec..889e3b55 100644
--- a/flake.nix
+++ b/flake.nix
@@ -265,6 +265,7 @@
         default = pkgs.mkShell {
           packages = [
             pkgs.git
+	    pkgs.age
             pkgs.agenix-rekey
             pkgs.age-plugin-fido2-hmac
             pkgs.wol
diff --git a/secrets/master-keyed/keytabs/amethyst.age b/secrets/master-keyed/keytabs/amethyst.age
new file mode 100644
index 0000000000000000000000000000000000000000..6ca0a23dff4b2eb4d4bd44c6a9b522f2007efd5a
GIT binary patch
literal 1692
zcmYk*?eE+K0S9me;=|2}5eF^`zX8h<X@2za+MWTWz25bDZSSE^*Pao%>(lk&+Pn68
zZO=?a4Vz}k{AFmixPkEvi$)-lOtS=DEMhQ`#UMX{xW!}|<{%l42Lqd;dwKuB_w)U}
z_>NqA(~iufoGrXKx;IW-a0yp7zp_V1s#UnQXTmZeOE*oqXpNMb>*=;?xkRUtRPCBp
zv)jDGBeu3`YoS}otoFiKW}p%R;Rq|7mf(tsU58ZA=atyuI}K>6xZJSA7;8c+0&2~4
zqEU)D>T-RCFjf}sies!ttJP{k^zu~~E&bkTAXXY3OJS6*Wkq<OEZwX(=ivzH8!ekj
zRLd8GbZ9QR{9NsjYeLfxK+dXmmx<g3M>&t#)Cz~1&9dnbF|)wu^|ps;Z9FUEN@qpD
zHH1f}cs)!fvsy`lOS@4L3o&5&F5oO?CPQ)gJeB)v0?`QAm5?K9kAzlBlWysn1TcCt
zV9W?+wSI{LHfF?BT~RBng$04=!+1Juk&<5qCXZpmdAnm8E{zKaF9kM@`wga^uL-P@
zKqSx*`?Dm0S6OSSMb?Nw&}EBs4YVbz!`?X4>Q=|gEA}kPWwah^qSHxju@U<agE@<6
z=K7qc<I^Z43%Q-uQd(RSV5X3qUg3^2ucX=?g5y)!!EslHEjaHJ5S3es7f(_@ax1Z_
zCOQkml1<_!SO*8utl*o`kW!W%1VHp$&IHmc3O?o5gwCAn=z&OeF<y3r6^f(tJPz<^
z(3}%<7ttZGjTJ@Q6`NQE?E|0)N4krLOTyFu&WaNSs_H!p<V#J53$>?&A;e2Uye8DE
zxFdLrayeFk&|pEJlPwwpHtF!_NL*>4HW?6x0yA-8Rwlj{jfk-U%y@v#DWB+vwM-t4
zA=+|cXz12iR`O`+dP8hY5b7>G;->tN5+qJXQm^JD15M&`Gc#6$fgP=c)>L0{#w4iB
zxM@-CYJ&-_H@$K+?M0d0HdKuSLx7_M+8i0l0Bv?=U1&{+NI?}SWT3P~Q|Sp-ubz0L
zc@+v-PLK!EFmKn?uIe#ngR67^4Va?EpfB+z=~9^N<Bbv)#Y`N6b{E!b{!-FNd!dx;
ze<)L0vWGQ{llhQAoN1450}5-7NAe)C=&_~?NU)OAteEsGu(?FIMKD=b5eI2P<WO|-
z@dyy60w^=6B*?RREvU(ZpxId4z?E4T^#Cb!qwy5w5RE2jM_ibcL}i%jv`y9KIUcLk
z0;<yTZ8--SdqFsf1d>@{xnd+&(Uv8k0c+S<n<={;0j2z4O&HCIF{7o82|-X+(Ez*s
z+5qYsgc5p;p)^s}3(N(|B%o(hGNdf&RQCJ6q&Vi-j~BxbT1w{ijAGJAwTawVOu8gD
zQ?CDEb90Z_<seU=luM+c8dInZ69pyc*Nvex)$y_D@RA{q15)M1%F#dHI)DD(R}Q@Q
z{yR@B_x<c2fB(VxKaEaTPYy3$+`0Exhxea(`i+z2*{{C&<J+kt2mbl?_v_JPKWW{%
z|EDkS+%Bft@4oSuA8l_vz59hb9z6OAcJgm`rQti;?l-cJ?cM#vG3?<3TQBBkyj?q9
z8QlHQM^3$U@z@Ptpa1+{dxHJf=JcJ1xg#HcEj;in@V{T*{@WXGynNe<efz)g**jkD
zKl<fwzk2Eu{{<i4c=9UVxBkk!b@ur~+n<}hdFVyjx^MeGzrXp=AD`MdariUW?5*z|
zJosvQ{OY?uq)w=(&V6bb?t13^YoAVk^UE)>H{boW9p7qgjlqo%zxW8tj_sqnu6$r#
zc<#bI-!ZXwKl+Osj_<f<i`jbp+5@LI_g=bu;lX3z;Qr@6Jo|`Txq9i;lfl7fHoklL
zmJc4j{|~opJcVr84_w;5lYH;qfN9=l@4N4=m*{Vvc?f&q?MGqu%(>4WfA;m8J~^uA
TS8j58r_ZJ5cfNG~$ZP)x9+p-k

literal 0
HcmV?d00001


From 9b6ef083a34e2a10f8dec98ea363f985cc697328 Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 04:10:10 -0700
Subject: [PATCH 2/6] add krb5 keytab for amethyst

---
 ...c89e380a23d28215a13ad0d0cef0eb-krb5-keytab.age | Bin 0 -> 630 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 secrets/rekeyed/amethyst/89c89e380a23d28215a13ad0d0cef0eb-krb5-keytab.age

diff --git a/secrets/rekeyed/amethyst/89c89e380a23d28215a13ad0d0cef0eb-krb5-keytab.age b/secrets/rekeyed/amethyst/89c89e380a23d28215a13ad0d0cef0eb-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..4f14bf0db090486ce5e6ed81f6a24cc29a67daa7
GIT binary patch
literal 630
zcmV-+0*U=$XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9Laye)>V^JVR
zOH^!2GgovmRZ=ofLv?2|Pft-#HZL=JSxkCVXEH}^HDXR>Lv}DWQfmrkS~E0FP%lwQ
zVQyGKXm3S!T1ZbgQ%g8UOGPv|N^dK3b!c%;D_LtxGGhuYJ|IVYFD++sWnpt=AZ%zO
zW-L5wAV4i3Nh@ebKVKkoaDECyFlaPybZmD-MKwitW;bn5VnJazSw}EoGb?jLcQQms
zb4gK0D`re-bu~0dS!+&VXH8{MH#9R<Fk((nOG8cy3N0-yAb4{*M{j62a(YjAbYf{t
zcr`^wadbCSGB#&vQfDzVdSy~<S1@8jWKvdD3Yf=C+DWG#2>Tm~T9MII+k)nhG14Kj
z7@%-CXkgT20%)B$5GUqXt4*{5Es-aaGS0sx1i|?(9KvI@MTWS6OoJzrtZ$`ncyefw
z%@08tdxD>w<|{cc6bnUZ%e6(D-ciuB?vZlZuNzSShaMLaWHVkU$+$$xf=tn7lF2v(
z!jyN0(BI~$h3Md`G!k?&YTC47*1dTpLUutO@<<Y@@Jer_V)Jdg-Aun~J6T1f&9H46
z#_%$HC<b$A;5RYdIcfu9tgSg?XcI;x6H<TFC$X+KfU^pgXOvyb*H_HgD9OEwvhW%P
z*TUh0lMs0q1<Wr+`RiFJf3b3=j^@u7_KuwCZ{F#?sf6G7*}zzB7v3Sf6b+VTQYMNx
z(1LWn9#z}blr&9&#1GRlRw7>X3;5p4AFdc-VO)O&cWRhlxnxp@^t95%FHUvTf;F1`
Qj5L~;z^VivY`Q8a|Gv!t7XSbN

literal 0
HcmV?d00001


From c0f1a6f13e864710bebd7fe4d509cb7309ca3d2d Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 04:39:04 -0700
Subject: [PATCH 3/6] fix: ticket forwarding by enabling
 GSSAPIDelegateCredentials yes

---
 profiles/base.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/profiles/base.nix b/profiles/base.nix
index 85563aea..84541f46 100644
--- a/profiles/base.nix
+++ b/profiles/base.nix
@@ -96,8 +96,9 @@ in
       Host *.ocf.berkeley.edu *.ocf.io 169.229.226.* 2607:f140:8801::*
           GSSAPIAuthentication yes
           GSSAPIKeyExchange yes
-          GSSAPIDelegateCredentials no
+          GSSAPIDelegateCredentials yes
     '';
+    # set GSSAPIDelegateCredentials yes, so that we can forward tickets to remote hosts (like SSH agent forwarding)
   };
 
   environment.variables.EDITOR = "${pkgs.vim}/bin/ex";    # line editor

From f538b9a1bdf0dd84c6d97771845385aa5947f18f Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 04:59:11 -0700
Subject: [PATCH 4/6] fix: GSSAPIDelegateCredentials on desktops only

---
 profiles/base.nix    |  3 +--
 profiles/desktop.nix | 11 +++++++++++
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/profiles/base.nix b/profiles/base.nix
index 84541f46..85563aea 100644
--- a/profiles/base.nix
+++ b/profiles/base.nix
@@ -96,9 +96,8 @@ in
       Host *.ocf.berkeley.edu *.ocf.io 169.229.226.* 2607:f140:8801::*
           GSSAPIAuthentication yes
           GSSAPIKeyExchange yes
-          GSSAPIDelegateCredentials yes
+          GSSAPIDelegateCredentials no
     '';
-    # set GSSAPIDelegateCredentials yes, so that we can forward tickets to remote hosts (like SSH agent forwarding)
   };
 
   environment.variables.EDITOR = "${pkgs.vim}/bin/ex";    # line editor
diff --git a/profiles/desktop.nix b/profiles/desktop.nix
index 0cf44725..2ca26676 100644
--- a/profiles/desktop.nix
+++ b/profiles/desktop.nix
@@ -104,4 +104,15 @@ in
   # Needed for generic Linux programs
   # More info: https://nix.dev/guides/faq#how-to-run-non-nix-executables
   programs.nix-ld.enable = true;
+
+  # Enable ticket forwarding on desktops (no password when sshing to other ocf hosts from the desktops thru supernova!)
+  # disabled on everything else bc they dont need to jump through hosts like that...
+  programs.ssh.extraConfig = lib.mkOverride 90 ''
+    CanonicalizeHostname yes
+    CanonicalDomains ocf.berkeley.edu
+    Host *.ocf.berkeley.edu *.ocf.io 169.229.226.* 2607:f140:8801::*
+        GSSAPIAuthentication yes
+        GSSAPIKeyExchange yes
+        GSSAPIDelegateCredentials yes
+  '';
 }

From d506fb54536c6902c218fd996330612cf4d1a1c3 Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 05:40:37 -0700
Subject: [PATCH 5/6] add all other non-desktop nix host keytabs

---
 secrets/master-keyed/keytabs/adenine.age      |  31 +++++++++++++++++
 secrets/master-keyed/keytabs/cytosine.age     | Bin 0 -> 1692 bytes
 secrets/master-keyed/keytabs/fluttershy.age   | Bin 0 -> 1698 bytes
 secrets/master-keyed/keytabs/guanine.age      |  30 ++++++++++++++++
 secrets/master-keyed/keytabs/overheat.age     | Bin 0 -> 1684 bytes
 secrets/master-keyed/keytabs/rainbowdash.age  | Bin 0 -> 1701 bytes
 secrets/master-keyed/keytabs/scootaloo.age    |  30 ++++++++++++++++
 secrets/master-keyed/keytabs/spike.age        | Bin 0 -> 1683 bytes
 secrets/master-keyed/keytabs/termites.age     |  30 ++++++++++++++++
 secrets/master-keyed/keytabs/thymine.age      | Bin 0 -> 1689 bytes
 secrets/master-keyed/keytabs/tornado.age      |  32 ++++++++++++++++++
 secrets/master-keyed/keytabs/zecora.age       |  31 +++++++++++++++++
 ...efed71409c8be4005529e9b79e-krb5-keytab.age | Bin 0 -> 663 bytes
 ...c4e1be230aa0fe2a7f6e28b561-krb5-keytab.age | Bin 0 -> 568 bytes
 ...eaf3749eafadb4dd593fcec387-krb5-keytab.age | Bin 0 -> 590 bytes
 ...0c8034703939a1df4585b8a784-krb5-keytab.age | Bin 0 -> 628 bytes
 ...42384dca73cbaffd56d0a632cf-krb5-keytab.age | Bin 0 -> 547 bytes
 ...98790df94827cf62ad17acf2f5-krb5-keytab.age | Bin 0 -> 683 bytes
 ...137a419a2f7071f498b1a8f820-krb5-keytab.age | Bin 0 -> 595 bytes
 ...da47ff5023ed8782095d263b68-krb5-keytab.age |  11 ++++++
 ...814e846b809dbdd1150407a01f-krb5-keytab.age | Bin 0 -> 633 bytes
 ...382e675153fb56dc1a935d9c9a-krb5-keytab.age | Bin 0 -> 591 bytes
 ...b3afe61835e00e661122e7ad66-krb5-keytab.age | Bin 0 -> 672 bytes
 23 files changed, 195 insertions(+)
 create mode 100644 secrets/master-keyed/keytabs/adenine.age
 create mode 100644 secrets/master-keyed/keytabs/cytosine.age
 create mode 100644 secrets/master-keyed/keytabs/fluttershy.age
 create mode 100644 secrets/master-keyed/keytabs/guanine.age
 create mode 100644 secrets/master-keyed/keytabs/overheat.age
 create mode 100644 secrets/master-keyed/keytabs/rainbowdash.age
 create mode 100644 secrets/master-keyed/keytabs/scootaloo.age
 create mode 100644 secrets/master-keyed/keytabs/spike.age
 create mode 100644 secrets/master-keyed/keytabs/termites.age
 create mode 100644 secrets/master-keyed/keytabs/thymine.age
 create mode 100644 secrets/master-keyed/keytabs/tornado.age
 create mode 100644 secrets/master-keyed/keytabs/zecora.age
 create mode 100644 secrets/rekeyed/adenine/371beaefed71409c8be4005529e9b79e-krb5-keytab.age
 create mode 100644 secrets/rekeyed/cytosine/67df2bc4e1be230aa0fe2a7f6e28b561-krb5-keytab.age
 create mode 100644 secrets/rekeyed/fluttershy/6b0443eaf3749eafadb4dd593fcec387-krb5-keytab.age
 create mode 100644 secrets/rekeyed/guanine/7451000c8034703939a1df4585b8a784-krb5-keytab.age
 create mode 100644 secrets/rekeyed/overheat/fef32b42384dca73cbaffd56d0a632cf-krb5-keytab.age
 create mode 100644 secrets/rekeyed/rainbowdash/f9a2a398790df94827cf62ad17acf2f5-krb5-keytab.age
 create mode 100644 secrets/rekeyed/scootaloo/67fff3137a419a2f7071f498b1a8f820-krb5-keytab.age
 create mode 100644 secrets/rekeyed/spike/05f1d7da47ff5023ed8782095d263b68-krb5-keytab.age
 create mode 100644 secrets/rekeyed/termites/bea4ab814e846b809dbdd1150407a01f-krb5-keytab.age
 create mode 100644 secrets/rekeyed/thymine/d2850c382e675153fb56dc1a935d9c9a-krb5-keytab.age
 create mode 100644 secrets/rekeyed/zecora/f9f588b3afe61835e00e661122e7ad66-krb5-keytab.age

diff --git a/secrets/master-keyed/keytabs/adenine.age b/secrets/master-keyed/keytabs/adenine.age
new file mode 100644
index 00000000..9d3e745f
--- /dev/null
+++ b/secrets/master-keyed/keytabs/adenine.age
@@ -0,0 +1,31 @@
+age-encryption.org/v1
+-> X25519 v86CGNi5g5GB7HfGegSoZKH4IYE6UYuW7O4Qp1XQBEw
+dihtkn1E5Hp9KfrwpFXZbgYsvQrJkjs/qiKFAmv1G64
+-> X25519 7O7Bg+jqRmdoLuwyeYSywn7hNVCnGi9nZNKIIHUCsyg
+TKulo7OydnTnFnLc3O0wSCQG0u3KH+5ftB/uwjaMwyw
+-> X25519 Ugm4wLUijYx0HxzXhBzJcID/AyoAEENw3R/GOeAhWQ0
+gcf5U4zBt7n/JKVT0DFmCGFPSe7hX9q7ZRQ39QMunO4
+-> X25519 sks86NHfXVAad13wF5b+TVpOod3xIJfF1OPbAo4X7Gg
+CmwRGvGmT+2yeAaGRUPLnkwFLCv7b5+0RaSdmF5wvKY
+-> X25519 eaiLusZ1rVAdQwgik0/JgVeaISfHmtLdcLYxKdSxk0s
+Wkk9uEeZV0Hv0XXduWFVRb75gr+vwKyUXOCZZx95fkE
+-> X25519 OfDB8gEUZYrobdcLu5s9oulIgJQXnw9gaabao59VTgQ
+WhhE2aJm0AQylnJqS+hRhOlkK8uJzn14dfk5i6qCuZ8
+-> X25519 REVJFngWWjw7sklDvK7OEOkHMCdgv8+lyVdpsJuelXQ
+sA39hl2OroO1lL9zupLiVBj2hEbNp8AZn526TiSEtd8
+-> X25519 vr1a534JwpFODG5sdIGU7PYxzryfT2ADY2bbmnBxSCk
+/IhpIc4U/2DFduKH0P6cY6Ad1Xn1l/brE09AsLhCZVo
+-> X25519 aNyj/U21JwiD8m3ufCcgQrrnma6qKsOwLCz0sK/KuA4
+XJC83b1O8UZZDJ+wo2/cvem7hhrnD0MQh4pPGgdXA4s
+-> X25519 EF5va1E/0oHsrgFaiE8YSFJU23qFnSgoygW/IgdscB0
+/9d57Ac0VVluue3o7siFOV1kmUrpck2Ti/qd4RGhzOE
+-> X25519 qDRNsbJvMTBGfTq20IkpN2APGSIYVBtRiAVgIR76Alk
+QJjiu1YnDpQYKNEFYgY7DySCZLF2OFW/2Rnt0mS1NP0
+-> X25519 VwauMGDxVnUgHrgvQBbCP2IsZWbrxF03p4ZpzLigVVk
+cROf8nU3o9Y/pzwmsTE0vOvCNRgXUGQr7zQEoSGiSCY
+-> X25519 4e6LaH0Y5hXkfbIEWNMEdp9uIK+E99uwLAQ59MC68Vc
+dl+fQCAdxNt4zS/DivcCIZHLinozu3nxMyCoLbzBrdQ
+--- 6l8SN/q/X9YbV3Ql36NcPTd9M5gg9FQp3Tv14REzJYQ
+��7����%�t��X�
�d��F)�7	�^L8
�ǯl0��{��6�%��
+�����[��!�b��y8� 5bX
+LH��~��r]�Ճ\N柜��G���Ӑa_���	���V$��f���he�$eb?.���uN�9�‡
��I��()X��n(�Z�,��X����j	P��f��ij2Ak��nՌHk�����1�*a)I�U.v��d�Ȍ�g��azi�f�	m�:Ha���>��z���bF *sv@�I֞é
(�1�������%UEW�;u�mϞ�إ3�k�.��tS�8�kn����8�da�b����{��xM���٤]��
\ No newline at end of file
diff --git a/secrets/master-keyed/keytabs/cytosine.age b/secrets/master-keyed/keytabs/cytosine.age
new file mode 100644
index 0000000000000000000000000000000000000000..66e717a39276b242e2f094c67e23c74727af8263
GIT binary patch
literal 1692
zcmYk){qGwE0mpHX{jijM(M*%U09jZfF~^s?-d*n@#_9EX*WPp6d+hOK+v`2|uGhQv
z+G>zF2|sAY@(pUhEFnY!Gl9T{nNGq4Sv0^VQ9$J}5Cjp0%_T14OytM@1+TpG`SiWf
z<|r9Xmy;q$lN-~i2hOXN&3$_;xK^u@dm0hb;p$8ohpA1l^wKk;l3hhn)0M-nHgYkv
zMoRT?WCT&AZt{U93>qfXAD9R_R|RsIwsRw7B?wxXFc{&`!h#KEUakq8<!46jj68$(
z?V3%NnYwCPCf`n~QNLzQ*czMlOKBdryh_jLTR5h}^CBsT>RhxuR4s9;ZWmHq#Y`6)
z*6UMSM4EGHO@JAyO);^th-A>DF&QUYKsjHj)!wAHYCD93QjnO%$Pg(ji5F|A7z&`o
zGYc=Xa!0T;L!7~!gZpD%Gab!VL{x_oZ%tU~63MZKp>{!&NCl7_vjed!2ZTiua90Jr
znXPGj*qI_}1vZOeF)e$#8Fo$6mt0s87)oTvWIzmEg`63IAfl{<!Q7evlr0x%C{_dG
z#xsUaIJAbE6oTNh0&oz^6!?Zy%jyV(c$I-*XsI@_lSPB{JYmwRqXA6uGM(qZ80}|-
zW{<pjzc%pJg{a{vkVR1~v@wo4ChU<_G?S&7D)G)B>M5WLMCdfp2{o#qVzum*v=8?B
zD2WBMJtUEmXv_oF?KiE`XyP?MwH$io6Kf5kQI~y1N2W6@;u97T9ZLqIC6X@ve9Rym
zJ}gk2NPQ?|D!kokjjXO>j3su&D)ij#(>k4~^%ybpB|1l;G)ji_R2I`Up|)&?fEbtH
zbnXGODi=GzGQ+Sg6(+@EsdktBVHTryy=hVvZK6$JmNf=Fd7%;FAa#AZZ>Qxdo^n&W
zXfEs|oZ*hoRM+3CNui!+vFUOxv^m8G2CQ(rKSup&xRh0lZ_|3@hFvJ@b}FqlLxk-<
z*2J9@?&VROxgt1By*da)RYa5ot0vDq9q_SetpVT%Y7?Xp3K*o!;M04!Du+bgrx%>a
z%lR~faMlhfWhPUdN>gmtg0MrHOi*S_wI`2C5siQ>#6~Tm-5YU)1q1e6=v(VTV-}39
zu<Yt`(VQ&-s|^*y9IMY5SHXZ0<}K<y1sg6PZbeo67+)-MMjt`rsT*)EiiQ;J^}RC1
z2)V;RZ2{=k+fHg=`C0>6mD9O`+fb{jYFtnPN+-<gL8t}=IjT(rE8@lr*dIWVUcq%$
zl{1GEakQOVCBhJ%taN=|CISg-MFN=#RIhAB{$zcJ7E&`TMs?s|Wa^nhR2?x8dYl$H
zD6hyx2MhVG(?vsrmMYOIT{sLM_Y}PBH{?c1^RbJMz?tC%XxgidsU#0t9RasHmCen~
zJ<J5H7HTLnbW0!<YHCa=#I_s#xR6pKL2|@4QXT}|Scodz&n{j@9sly-gFN(O<$v=d
zK)7qK-oNYjZ)|(}@~?dO#L>qd+k5_&8*bRpFaGnM%ha>no5_XkS6qDOANSsQvU9?F
z_2mcN|I-%u;OE~@w1eokc3*q{k)3x=8V_u9fBu)Nc3*jGA^u=%`wRPv?nn1L`tgSP
zO!d<6#b+;narE*{x8C&7ck;VG!7BTHh4`ObWghwB$Hd^8??3gNJh<<be_wl|_T7i~
za*uMScb>j?<6nP!WmoOZJNCbR96xa1<Hxpc-?8I&f8F)Lg-4E@Z+~>-h3j7U;N81~
z=dZypm7FKlUmoqA+wop6J9Ndfhi}f0pZV{px1Tus`k9SyZXNvX$*<ma=C+Amz5lJd
zpV@aad+5L)zJBU@_Ks68eedZ%e&+e&=+j3}T>aFc;h$f+{TtwKu6~^S@X6i(`NFaN
zoda6-!=G~Y@cPrSy!F~I4xfDP>~z=PfBiXBIriDF6=$|xdEHMgIrk&v{39F1xt*T*
NrEl}(gWDUo{2zwoQN92G

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/fluttershy.age b/secrets/master-keyed/keytabs/fluttershy.age
new file mode 100644
index 0000000000000000000000000000000000000000..9d09b3af7d6858b6e85414a5294b3bc716379ce9
GIT binary patch
literal 1698
zcmYk)f6Uwj9mjD{5Il!U;xE+ThJsm+XKk<TwIzu5`s2Cw+TQiowO12NukH2PyY_lN
z`qS};4n&?v9ugFkxIc`BOw@!Q2?2bZZlamfDbq)$bA~?_G-x2ATe6wBxIgc|?|-l4
z`+3{Gx8cRkqD)r7EIu$>_&^5LHtyMLHc%8I_5xDRHA*YA6RMk}EE5d%vYEPJ61N1a
zPf=KpZ-sCqQ>0uQNpTD$00(7hl`I;QMG+0Se4c^*hU6e-1BgI5UlCAq?5_#@${8Sl
z#*<S!Z1yFJW7>`<EJDDwd3;nzFwoNbu0`?<y*ABEjux`YA;wltbEea6m?KkFF?>mx
zSzK%)q#;cuUQUrUK_!X4%odKm92aS;gH(f+z(tmkw|U9yarJIKF&P_#Q;n;ol<!jr
zL5c%RwXt4`y7d4r0l+Jp6Fj!ECZM_tsvKefxhB9kJ8xt_-sW6p3fu133%QXKL({1+
z@fUS0n>8n4DKz{Nto3~$W|D~_dda}hxMo;UWPnl;9w==p_36G?>P~;f>ao5i#H^q&
zu>rXVsKtopM<Y3IE)f>7Xiwr*bHKJ*vmV(ob*|Q1Ej^h{b<nmXXA%<wS|o-_%yPEY
z0yH8V=P?jasY%=GUqa#Tc!-WR5k0V#5!3P0NZgbyQV^0&9MPhr-M6k@CK7Np)op-i
zRh4W$H|$;(DHbe%p*hE9DkxO#dL@OlJz_+(SQjkUCEIGm4PhmmN)eqb-1(?AN1#;i
z#j~cLwps%(Ni3m_)Pxo$jIzAn6wMKC`$9a-`*}>%L$jTkvvOJrghE8Qpy=y6Kwu0R
zY*}TZRlqDe$)y1+rl1KYj3@O`y;PD8Hw%W#T&%gJEssbkDmqmKr{p4}=7T88GnX4K
zJ0_yx2*bAslxI4#wH<hEsAfw>D;QcGutqkw!=YTS;Ho>}=X^j1KwWi+v^Rj3HNn)b
zR;;#h!m5Yx)ymB>s0_sq0&|54z))%$AUth{B)nV`Vo(WWeq4uR4L96I77j;as^j3a
zkAlT$>2u&Jg)wi~DF?L#Bl!RlO;<^0;S@nSTB=N@<SH||IDfTk9b{PFPyoxFtO+5a
zqOz3*v|-b!lUGJNbizU0l2W`h=k8o=Cw+R}Z!b-}Mif@3*TTsjQCVTvCk1d7IiTL8
zf}%Sa6H+6>6)!=dG;-F2q{%E08yl8!AQTvDEn%9b8|^*=;<8gI4(ABYP&OA?ysU+4
zGg^v`tkAm5rUhWDP0|xpyV7R7NR1>>EMR`DiJKieUlTg0Pem+CC7g|qIoFi@z%6+K
zQ*~fA<h|jPq4b4km9YlaB9AU%7ojI}1HvS$s1{8UhI+B)(theq>Ymli0}1PBhFII!
z*x2hL4H&``uw~IW*bvbulF@;O^s#{hf?y<4>3p0}v^)dl+KtcIXY1#dXLtYk)vcXB
zwdJ22Jooy+D;KXEiFS5>Ki>0^1J`QB?YF!B+53_2eempM_3;zs$tMM2_h|KGOWwNj
z?qetZ^UIsR>+in}{rdm@{n6)B33&9!|9E6P|IvpYzhlp@-g;uca_S3D?0M|Emwx&k
z>o4zoXxlxPU4Qh}@#oOr?3})7j@^3)bmq+Q!^NS$?RoQz(0}0D@4ElqYnJx)JoND%
zbbjZ7;?(nppAldC#M?K0Mn7`$MkW6BXO$OM7v{CQF91OP{{7OVI{dQn)WBnJF<w3P
z*H0PSM;<Ak$zQ#E@HOzx<HtUK-)(<>>r2~zKrg)wUAuMOv2WP=^6}Hpe)E(3_~pAE
z-Y40o@BH+>UsS(+W&ekphmP((`}FxYXRqI-e(kAC*W7UEz$@bBeLo=bTb_IHD?j`B
zdoOI8?n^&xeR2DJ@7Q?{e91iZt$mMO{{F*9w?6Q(ix(fd`;RBMH+COQ<o`Z+@*6L_
SacgwlJ<Q)P{O(^Tv;PCN23sKj

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/guanine.age b/secrets/master-keyed/keytabs/guanine.age
new file mode 100644
index 00000000..6e819253
--- /dev/null
+++ b/secrets/master-keyed/keytabs/guanine.age
@@ -0,0 +1,30 @@
+age-encryption.org/v1
+-> X25519 wYiN7JBlYmkCWAqagn0MkDoYle4f3VqH96BdsS6rgl0
++M56m7ktRfXkf2soTW5gkLGeTeDR1VbxJVCSwGjaaPM
+-> X25519 zNCQv8CAmQIeDkq6mHxBNdDT4SeKVK0VJMiukqC0Oyc
+xTtqthljZYXVBq9E/c3jfyXbResVArzqRWFAUU56cv8
+-> X25519 8+mdvWQqPQDQ+VtNN03ZUPruGKNhmdYttPnQoFhAUXE
+BObzEsrr+pbfLREbwThZzsSOcDeo/HgoasybaDO2rVM
+-> X25519 NsaqYGXFiNQlhoeKrcCYxUH8W8ytYXxCRApr86EDYRk
+os9oaCSbHTo8wTz10c3SKsK8oOcZ/QE9kqEm/m27J5c
+-> X25519 N5KU3NANlBWDv1K3XTauKWy4WJyf+VRB5+b21YCN6X0
+K20D/CjLPGDA0wsLoQLFhVkvIwuaCItKexBImLrXtRM
+-> X25519 Amdtdjn2PeIgvTziB5yTdcI8KszYEMu+7jK3qneXs30
+KDds0Mnyz6M3dfBeqh6d9IU6liwxKFn5qLCTUCUP5Ig
+-> X25519 0bpf5pAKGfrwjgsQMZ7gLdaZMgFUtViXI3UlKWzoQ3k
+oYBXtCWXHFNchtvXouBKiKVvLF75YoAQ21zlOvtB/gE
+-> X25519 xtXOFxVkcdPC0osh76066dPZw98qge3nkLKLKL3f2no
+t01sn4J7YsVvuFPZU3kJoWhpcfu2sAtIt362x+Grz/Y
+-> X25519 ZNtwveFjV2sz1B7VQrQQZSS82L3q80R4qy0EHQKejH8
+zQCk4RY/zWzkpSi5FzR1uJzGl692bEi9Qm+jD9XsWYk
+-> X25519 Sd8kf7OSRCutI/r6zr5HlT8SJRMQAHPTDJ2OhKj8yhI
+YNmjWgB+Eu8Swh+JCCi/28XtbEtWPR9z3pPH014smRM
+-> X25519 t5tW20rsHrk/a5skSFunyXfRfaJCSYVvnpJ/4IG1OQg
+Zug75pzzj8IwE1bcuXkLNThW2RpePbKNUl1rEsVYfeQ
+-> X25519 dEJJZvfmAG3KMgDAIrD8xUCIRfBQxhzrRmN27r9ws18
+aUS8UzzhDclzSUGfnzebUa+a+mARrabTfTtTPFXGOw8
+-> X25519 N0Wv20cechyuH/X1zBz4ngEOtpim5UMthLM8xasGGyE
+ekG3X76le9HnDantOEMEB4smsEnKvsy6So7IPXnZbfs
+--- 6MgTeaSGDth06IIsnOLOsgR4Ub65HCrQkvECdHaAt+Q
+�Θ��8vtx��	�Q1ڌ��#W��N��a�P�����=I.7'e1��vt>�^1Mc��pӑ��L���›7�o��Uii�W$�\v~'`�+)��75�C
+�Y�L=H�g�������y��&��p�.��{�1�HC�<�
\��n��R�n՜!�ʐ�V�O��~6�G���нE��]��]+���C�Y�dr���2����
y��NH��7��)�iW`p�"����ĭ�Q���%7���w؏$���Ll�X��Tž��s��z5IZ�S��Vm,��E�SA|k���]��<#�	�-���f���cp+��Ү�T����m���K@��4qO�zK
\ No newline at end of file
diff --git a/secrets/master-keyed/keytabs/overheat.age b/secrets/master-keyed/keytabs/overheat.age
new file mode 100644
index 0000000000000000000000000000000000000000..fbb49dbf258bd380be4adfb5c88604d6da38cf71
GIT binary patch
literal 1684
zcmYk*edyc<8Nl%=TJ*|vg;lI#>AI~|<IlX^OR`EKxl1m0N$zsFBzFl`O)f8&T;47(
zcS)=cp;Xt&a8kjIVVy_?{Y_X`aDQywV4H&}RIU4A2mYKg(5?(8Y}0BL`{(`r{PE#=
z_&&O0ZCT+gDdWtI!p}#E1FqoO*6~AAq|t!!LjWscGHvKf6F_33MW%{0XW&^JNp?_#
z%LM^hETC9WC{ndSDceOs5~(_1n4rwqQt#`9M^^Z_N+(XwqjDU;qCi}%H-wHD+8v`y
zkV0+{9E3QQjsgL$(XuH*g}+2KL9!E3=)qJCl2N8TN12XcGyrDMQKN}U4pvp}@Ii@4
z=@OPO93jF;l{bXAPr4@AHm$|n*2$td7Bg;?FP9`D6w8)`42f|f=hNJG)LMLNLc#{x
zC6RTw2()@gHSENShII>M0&LXw@Zs2-!V_#$fFjd&M8jT<Af(04P^uNo6sk~Q1fEzl
zVK`pVqvg~zDyp^uUDBmdU1!_vf-d-l1U4lQNj=)HV#Qf#;+R=0S=XQO8#^Q_I23tz
zYLA4f(&(%L%Usr5_)J49FAX3%p<|@yl*9I{Cby_2If5x7?00~9$)`&fa0M))BqUh1
z3N{|jrQA|lF+JN5QjMFIutlu;Of_~YVhVs^f+J{#GR%sQRymYS5n2IOp;L>;h1t(@
zR1TW<tS6OF)2G^0V=ni*y4C_y9P@RrXbGbP+YszvU9X#jD9$6u3ks!e1yG*gZAHl4
z%14Vt?b_OcP6z0$*6<7riVHtqxs)03d0pcxpALm-Q_o2aXVAm~S{*K<lKO@)o8xgm
zjn-g^2q5Sf8rMd`Nh${67$c#21SEKetuJvxtk?Pt2AD&_sv0=s(O^<%ftW_<ewMGR
zJWkk18FT9>R~>CeYzQ48p697Kq%y8U`erK|7-%n2A!O=KVgyhndDzJr-)W=unn(m@
zkaVj0(i^xH-x`l$n752-+-uaQJj#tGLyuNQ{UN?7l)Qm!x#787kOUm&dd-$f5nUoC
zy^$kP8PF#Z9rqV&IIT73J!ssU<>o9OvVJsDy_6t&0$#~!G~oS+Eo{(4#!AE5Y-zBN
z6Q7VrPz(i=2Fa3yS0$A=UgH(p3n<NH0I96hx<sipFAG_v8AFce$Cyc$rn6oseCaza
zLC4mau_F5(wf6G_UTj>+_DggWloAxi300E$YDn>7d%@FC2|GH6`U?af1@weNqZ;PL
z_@sw;8G!bSTSXWsn9jfqT59OP)u$ZA+2o?PN}KX#OTy3&&;^f0ZkjVF(QT{p(nOoQ
zN138#(qe`r#fZ<tvW?YRyumtaWB`qt<$O*}5@5RW7=*zZi-FJvs#Gm$h=YX`y!F#t
zTZcN1f*DDra~juO;R=rU@=&D%mg;(SzM*oS(JA;;@a@LBcHnmQQ5n3Dp56c2tB)M}
z;u}}?J$Pez7<%%KyC3_-d&&!c4o`pN{@r~$$R7_1^1Ux&xAk`~J@et47yh$zbr<{I
zfe)0)<<A~Fw>`Y)=+7?Q`L7+MR$pDeGT3<`J#a#3AKi2Nx$qkB{5uEt5~m*j?Pri(
zz`7BC=TD#h)WG}0`~Q90@jW-seC&hbiGL*5gkK%|-<kjZ=!th;eDbZko;rrX_x<F^
znZGFg^_1STeDLevd`T?s7nKut9+9p;aQf<-Z$A`n9l8F)i%0L;xdGBYIJrG_zw)|$
z{?*5ywN9P-`Q@8WT&@28p=aM%o<982k6+n;(Ro?9{QSwAUpn;Kh2!-*c8}cs?)KOA
zV$VrWZT<B3SIk`b-Is5C?$J+5Z$}S5^PAJZ9G<)M*gyZaeg4gByI*C`p1kkfQ{Tvh
zU%%4()<-`9KlGNc{q%nQ@O#gF|9$s7@bty=_a6M~$G^ZIY`na8pY#ZG_PaRq`nUfN
DZJkp@

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/rainbowdash.age b/secrets/master-keyed/keytabs/rainbowdash.age
new file mode 100644
index 0000000000000000000000000000000000000000..53d7214042365983386b7c0bfe2b0b37459c3cdf
GIT binary patch
literal 1701
zcmYk*?eE+K0l;wyWPuB!Ofgvmw=rA-^|xz#?ez}aW_#DW>$TVG)3w(!&Dy(Oug|^q
z+FlzlYT_cqhZqC?Cd-J*3*rbN!7LIUf)7I^X48$J!$>B~Co(pp%XEUGFYhn-<on{Q
zTjqutOyVM1+F`IKjIC-0RW|nR7{e$EHFwk;BW_ck+#O*qFXz_C9J8(;D-Jo1b1+Zj
zEGUQ|=!c_G#q6N<C6W-%q~$Oxj9b~U-H5V)Y*Pj60BPABn2ZT@YizzIl-(3e78Vwx
zv;-~<(A52;U<O7Pi&=c;vmpu7{X)|x1X$6B(}D$-XsKHgwQ6Rbpu|f#9*U$au}zV%
z8uG%YIF&a>Yl4%_vs4&IZLJs8iUg{~jh47*^rsWV*1*6J>qKDyu$1FSB_Z3(Au%U(
z*dwsMXd@gDC99C4alQ|YW|*}QRTA@7>^NK#G`%hJh|K}K+i@Ya-3!V-MF@5lfl`nF
zOQ~qksk=&RPF^7us-9c(28WH(kfIh-SCWxQ7C8Vjj53~G5-GVtbs<mJ1<}H1Y%+5c
zv#VjnaF7gIeMS=d(}a+5AOUT8jv08s<ak(72{CjsHCJsF$xO!<N0wmtbJ^?RrAgp!
z&qkH0QWA<~tu?TI+v_2wSFZ|Fk&C#hqZjld8X`STuuxyI>pG(OgIPERD}lNKxgrS(
zkX`5?j*3e)>eq*oPE%^p2h#vq71pdpTjpR*@D<;Ofg+#PU3N8Sf;wxj8fFgV-Tur|
z(s8#1)X^Y<px&s$<^&JmTrH7RwL|)=cBeF=0%PGqOhn&a8Yx~vydh4Q^#%<{G6gC%
zPH&GCekkCDq4azL?{P~|9U+S}$2g=|Ile?zR*1x~<dAp8peQAH%o}uyWGO8TP`bnm
zIq=v;H^b{0h_5v`N)($8w$Ny|yU5G{h=^Q@ss%=^?0Gop3}S3TA{H_pCzZKAaq0q(
zEhly!a{e&&F+*>_iQd<HO&RInH47I6yus?!n&8c6nWhVkxK}zMTcrk&A!}91Ar>;G
zL8z^`Xd&Z5i|x1-eh$JZgBlJ{bd{2lyV7)O8N^6|({kc460#J6MXUoWiC+_HUYsyP
zrZ46}hZQW?o|pvP@EmqXb!64kbVq3Btft3qSQ$r6Y6c8sNNeF8IP43!*@E#QS1MZ7
z1ku^NWs{UdcT0Z#I8SykbT&ijxq>DkEEaAo<Q9z&)P>?M2muKqw^-mFFRB$FCqhf^
zFiD3*CMGmz$i)B<ka{c4#r7<SJu=EAz0`pQxz<1?xrz5xGe-Tk+#3^0(oXV0zf<NE
z1wqWf_6%n<p2m@fSE|$IEN(P-E)~jLpY-M^hmvRwg6*#18g7F&2wJN)BPIR6u(7eD
zIUO2HI3gHr0;(ZAhI&I7p%qr(EQ>>iVgS#BSxECxfmE=Qhdy=T>LzjcBk(K7w|x9d
zN9L_-RtOm0{z<2O{pZZ*w_1<>V)y0e-hB7efxBNm`s%rN{`lLSuipBv&F#AmwDIfi
z;9oYiyH0&|Px<u^Z$kHe_bqsmzsUdPzkiBfxQF=J{%3(h*u^*fKYT4XFgYRo^uEbM
z<>jkCK2Jn7^|lv(enZ*$%|UnjdFIz=j^1>s{*`C8ZrvR}ed5~3KmE?zzkBzkgZsAp
z?Y-A;*?jD;PkOgLzW)ln_u%XA9p8WInQ-^@H`YIN+u5hy_|HEc`PRM%4}bff&$jN{
zwfFw`^26t_6KB48WzS1j;p;x%J9g*c@Pm&&^`o~ljT%uGUpsbZ`H3eW{bcPkM>dab
z`N@+vUVHBY&5u2x-MsJL(l0M)|NP<aZ*qh0{CRI<{{9z!_0Z1uzj*swN6($z1)d1M
ze}3C(W_srA_R||roO$f{{U2EV{bBynH@0oN`Oq~dXLtPI;@zi>H@^4mk@;(v9{lp2
X9Vd4_|H=*edFZ2!i)XVd7pngQ4>Dte

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/scootaloo.age b/secrets/master-keyed/keytabs/scootaloo.age
new file mode 100644
index 00000000..f6b4d182
--- /dev/null
+++ b/secrets/master-keyed/keytabs/scootaloo.age
@@ -0,0 +1,30 @@
+age-encryption.org/v1
+-> X25519 +vbxVML5ZVJurbjyUAaasXAhOqS1YHpBy/nT7Ktauzg
+CFGoaKVIJbkMfvOpoN0A9cRemDAW9gmkYhyOzlTzG4M
+-> X25519 toQ77/8wakz03wwgFllllS0DpkRDSZIGdsbyrFVSAEI
+fiLLaoXqK3lxG+q/sNqL2Wg4DXh4+/hxAK7KVzKMrzM
+-> X25519 bL/yFQ9qaEApqNpv5jJb5rH491k8wdalXOxqQGhxyC8
+gVvbXoWjfhBFE4DZ7Vt4r5P5PHgUC3F+nkGjdkfs7v4
+-> X25519 Heby4H3iqfdsfrQS5RTq/g3nYehyEsORAhkHgpWczFY
+W51XC3FPi/v1VXsljk9we7xQfNTAvyMsucrtaMWWwoU
+-> X25519 kpOx9BUWXhayycTtWB8SbPUvo3bOtbeNBQreMxQL5z0
+sih+OJtX8v7M9MrIhE7GT5qPshxwqxFv8L1w7sBBmgA
+-> X25519 6U+C3gaSym+Q4Eh/BdQy1mbk0etyF3tZpa8gWIX68Aw
+M/rbwiJQn7SHoK+2fG/rQ2DEM9f4YnYnPBe63KCqk+U
+-> X25519 s8IMERKPnzMATuLAIEk/uXA53DTm164bysAdjnmqZxA
+FuqA0PhbMR49r0NlbsyTc7YODle0IwEWXsECMnZYZWg
+-> X25519 bOHVETkpCZIca1aSwevtaeGWfFlvB2WuR0qh9cc2sEA
+ytlOmsYsMRn4cseJB5wbf77Xz6w6wGpQXIKJtzzrPv0
+-> X25519 KaP+MSXl7DUxLlJdtJF5q0f12Ks20rAwQBfOl7Lsey8
+49rTmlt8yFHEPNWsKH28sTrcYo9pAS6jOH9dc9DygLg
+-> X25519 bYlRShEj5Ha5wKjAFHUFj7N4PSqDV80pm7nQaBC5mFE
+BhqJcB+R6hvXRSAWZEe5mMorJmpQqv34dAIW6s9rdis
+-> X25519 Gys/Pr9NOmjwdfQZ7UQKH9tufJBM2VOWlv/TwX6z/Qs
+48ILZdiyiRgH/LvCOKnUctxOshKZLFf/UyL1UwG1OtU
+-> X25519 BIGNkggmXO3+nEhdub8Ciy2/1tFgh017Ldx7McjzGH8
+TsIz4gc57eHNcbZGQ057R+FBQwB9u7oCE02p0nXEhnM
+-> X25519 wxvv5NfcfVP393oM8QYQBcXtrHLyCVNEk61Ekr+5FTI
+u3NUc5XZ8cDMa6ADmHUHvAROX0zJS3wRyhNaJP6wNIA
+--- UEkt12v7itMXtMfmiOK8SbdCWH/lINgoSF3oA7hF3Ac
+0,S�����L��iVX:+�2����\�-��Z�l�V^^G������yX)����[���s���?r@lJ:�rP��ڎJ������f��H۪�-���F��O <���Q�d���
+�+4�1i������hɘ\�>�o�(<0�8#�W��r��>��׳ך^j)�VT�jj]�2i���[^u�멗��*�5a������e`n�t��F&I'���$l�����F�Vq�u��^��m�;�	�4�X	ћ��EP�������T����n/�ӄ�L�l�
���{����EY6Q+���C��e1R4D9뺋�ȨMB$�Z�d��iO�i�mi�w��,
\ No newline at end of file
diff --git a/secrets/master-keyed/keytabs/spike.age b/secrets/master-keyed/keytabs/spike.age
new file mode 100644
index 0000000000000000000000000000000000000000..c79d392c28f053222125af2cb07256867526aaa8
GIT binary patch
literal 1683
zcmYk+>#yW=83%AqIK<5ug06^>2poB#gvr^q(`h?JCA6pgwR34Z({?(Y>XPk!W_p`W
z+nIJ;l8qSl1sK4rA%u8Y)(ue<6P1Wz7fetLvN4Eei6HXAOEfGOjaip~8_&!62cA!!
z?>En5`tGh9+ly+RPm}mivhblLQro?KM{i&lLhiJk{%W)`)*$v^t`dbsBS~16i5X;O
z6~LqNAl1fno>>#2hAaeioa13`bCl^r+6buKoUwh8pEltEZW<NGYWf`D&Ui!cq|P2W
z3r0oMb_QjI`U`XEhGgvdPO~>u+%Uu^zJs>M5nLl&bls_9v6{+tl`J9{Ug0i_yQC3A
zpl7fKovxecf^?n1h9DBQ8q{Z0C?-+h(5h=nGCQxwd)h)9d!Ysciwv-mTGL6bGlN1g
z6R?Uv1)~&1y9ZQXnm3BRQV5U}+folG(+JkZ_J*Lc4p>kSJQd85+MW@8&*F4#;l!NY
zqssy^WvKyXWiBE~&8Vk_%@qUR_10op@Vyb5W!YFCNtUe4suDDdMgY1V%lR9EU3D;0
zYO>wF-)aGF<d`jKFrHveI35dYa%JK}&<gS9WZJ4(4zb3Hu*FGT4=rRc<Y<aubpjTv
zL70^eXiubNMB8+<DXcqLP*SRD0hH$>$qO8AXt2t>Hvt*Cp8zi}#)0A(ewo$ksbD)w
zmonj?-atnxly;Yzmt_{;)P{(xv;c+7OP1?(HhUQL%S8_&DH9iP3z1c|8#5l-2Hbk;
z*i8Vp_<GD{LNup@TEZ}Ot>nwSo)7dXW-BDzSyR)#j8XH}Je?-4H4GKF55vQal%he8
zW8H{!T9nuWPG?B+(lWubIV|}hhY>c;Pu6=&P7AUcfJ8(z(p(eOWZJK~@xTrSdlNiy
z5tnTyLpf~m0^{dh+ujhm6RZIP*OqWbfyO8saUvxsvX+8$%+sDx8C@@G>V0`Ns9_vh
z>=g}SrK=jLRJn;}kU`Q?wxS?6<yKZ5fOW6abc0Qy*q_&J_@(KKKAKuuUKvOSf^*Yp
z<@0Va!6<*;S~PGHg=_ShVaUGFv%P8wV<<5sW@MY1Qb~XURJL6d>9QjY!o+s4u>*=s
z(*=Txlgyt-Ov%I($Qf26t;2~Cu(WKJlvS&rXp@SnnK;4$rY_7@#cC!~Wd@}v-a%Z;
zw<JyVX(XP`+d?_qzo-qNIh&BNN#iyFvMinrnb=5Gxe^P$f=6sN#EOnC%c~@;S~X9b
z>qe^B(R5M~ib&!iqA)zU_BvyOFc(C7v}8MY-HwFShLECi6VlDDf+TZl&y}OT)LcrG
zOBErPC?+u`D|VjinH32&qaf)b4(cqXle#1$Z2`=5lTPzABzwyUm+Eqt2bDL}_y5xF
z?v9c#m;Lo3jdIdY`*5)uxT{8{3?U5FRxuwkwA>{2`c8kpx9cC?dhN5yn;*XlI&tP7
zhu^NY`sb3L><kX*_Z+$I`J?!EkKFggzxm+46Zf9{!;2mDH_h*S>9+@@yTARxnP;AH
z4raI0&YuUjU4q~H%m?yKXP-WQ@!nwT%k<#P%f}u(r#+HypL*!FWH)^HFBgJ$m`~q$
zL;m4^t@4Y<|M$9zADbP&`3rpeuJ0pk{6O=j-FH6u)~~L=;_!B`{mP58Q&+s?pVTkC
z@Xx2N{yY6&kH7pT`Re<3U+O)OKKa#m$IqR5`PB9;hkx{m9}d3p^rZ1e@1a+Yop|Jp
zAGfYP{rvjv6V|o=e&WKxJH4~YjW2!d&MP0^b{-pi<?9;rgIivI?2W75=YID1*5}Wi
zKEyxqp|h94#Y3;%|J)0|fT}+|OB^^l`Tgh8^IQLke(L}AJ?P2<&wdIVKXU8#FAx6Q
zx%I7gFFf_FdyanedtbZwsCv@cksBYmWBcq~;Qa66`;|Lx4y$k0U#*=!clnxMKlp#3
C0ZttN

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/termites.age b/secrets/master-keyed/keytabs/termites.age
new file mode 100644
index 00000000..3aa70417
--- /dev/null
+++ b/secrets/master-keyed/keytabs/termites.age
@@ -0,0 +1,30 @@
+age-encryption.org/v1
+-> X25519 IrqubELtcG8JUXfcCPOiT8+j/C/uCw+GyROHDXwUlD4
+kVAkCsJAJkrRaAqXHkUejIbscyYHSYL+5LnJvctjrGw
+-> X25519 DWLoFRuJ22IMpsWd/ICM3KjKWdI+VEcOKVY77f5NISU
+1oKXz8krNlEPlU0pO/7IW2GZoyHZrec3BHorHoxM9Ic
+-> X25519 IwTznUgBjP9qc0ajlsnEoIMnjOikOk+zG+RFteGjZn8
+JFC1M2OFIuq+Wv/ADncyRG7Vkiv+vuBf/WB3yAjdCl4
+-> X25519 77heWQgVEWWIXgaRF7WmCmYGS9Ctr0kHgvQ13DBHeFs
+Bb0NS7sKjK++lE10RVyeSsBdMIXcJCcAdT5IFegrPMY
+-> X25519 qHw+On68JybkRrwTXZcieHCczGEm5pfGO+lQKhyipnw
+4QfwadA4rHVywI8UIdWM5Z9g+7oNpD0bdkuK27hOfUg
+-> X25519 QafisIbJdzvlEO5mzOAPvB2+adRrYu567jVkgzD+TH4
+k2qvqKCujQ4CfbSVJ8hDU81Cd1Rd3ytS3tgQNyS5gcg
+-> X25519 ipjFwsZMeUXCjGcdK5WSY/BalzWY4PJyyWwFeheazh4
+P1Q9oaQbX0BTqO55jmhNJWBMB3oTrjQFyr7L3JNqP2Q
+-> X25519 vBLy77PGFyQ4nCtB0a2fKvIBu2IuGh+wxypSRtizQG8
+wsmbx61F+OWjz2iCJ90eCaqzE0CnIwdzrlLK10cHL4w
+-> X25519 MAthGrEzZVYe8Ofq2ZNISaelnyEHfPZ85w//Ei2ixlQ
+jlhRnh3klOC9lft3ThzDcZx9VpYvr3UBivbhlInb8fc
+-> X25519 ujzKxXx/q0ssqox4s761Y0FIaMqU7HdhnW2VN3B4GFA
+lITXj6VDNYfXl50U7XzLsVP54ogPF/fTXKFA4tyCoeg
+-> X25519 U2f3lxoh0rn6m5zaZYmgYPXmaoaiUJ9N5s/PpAU5aTM
+o/3+9nMxZv5fX0IpSIuTRD74xump7GnmuRxhbvl00is
+-> X25519 /HHuaWhz3o0U/iH3Q2mEVsW+ovJvKodzGxJSGIvR/nE
+uHn5FaqOi5rAE/l0WTEAI/3aDYuoVdG+ugJ1Y1AFkKE
+-> X25519 bdIRAxWaQn0RNkBpv9yKzcUsFcBSGNxCtNxfG24iMwk
+EJ+3nQr3bDtupdht38uIymHrSDcDTTW7cliBmD+pgEo
+--- BXfl76KfVzPigmEGC+P+P8Igtq3kpzD4LBU/TTRZujA
+2fvC�҆Ώ��`0��1U;�]^N�\��~��-\j�ګ�ፙS���v��~H��R��
+d�X	:�9�(H#[d�h[��2sq7���x���GP���=��Pq;�7	�Q^W$����[��ġ|Ӯ(<�����'G�Q��7����<���hi��Hn��<p�z�mV��t�����I�S�(�<o~�l^Eg���v,{���_fn�g!	�Ck��K�d[+��P"��ǨǠ�4�^l)}$d��i��Pk�T13<fÖZ���ND�Ҩ7�gM��A畟
�p��w���膬�
z��if��=�L��=\��0o��Nö
\ No newline at end of file
diff --git a/secrets/master-keyed/keytabs/thymine.age b/secrets/master-keyed/keytabs/thymine.age
new file mode 100644
index 0000000000000000000000000000000000000000..93d2d0f6d9c25de5ab686e677b6f1c88c9365235
GIT binary patch
literal 1689
zcmYk+edyc<8NhL^R`h<Gq9Ap(blsfOdbF2Ia+k!>YF;nNC6`=sc{@b8OLEEG<?WKo
z+f8H)1x2fF?XNiI=A0Y4F=m~12wfS%<_i|q$p)g*mEv#~=V(Qth+zM`{~!49<>7fI
zo_oZN?6gkS^Ef&hr(UaQH;x=XWP+Ve8$0BSq&5_K<X{mv3_K})r;`^v7>d~lX1NZ7
zcj2YNE6_M78!24)!Dv`T0ZYKBR;Z5NM-7i9Kpgb}q;xwz09x!g6XPu*g+i$ZOe}s1
zhpT8lr$Rw+*J()wM(%-9KW<MVBqw}A^%{)9N*!iF73_)@<oRUQr7*j+RaZ%dGpl7O
zliXpr(ZFkRTY_n7;xZE^q#CSQq}3&9HlXUJi-SFAlaLiKvAa}T0h-mafqAV>f8y|R
zw~H)N42j@jnazE2Xj*!*&fyk4@cZL9OZ4pqsp-mynQ%m{0aZ6hW6kUqh)HK7UR6^b
zpGkSe!yrB`(FSXnUe)f;g?wGH#-I<k?X=~Se$Sv%f*ds~h98Yqm{lU#Rzn8OrlBn5
zb)C>iikEE>ucUUErBb_@b3WD)h#t@_(jmEQG{cl)wR%KPbpvVQ&Onb9y4lN8cV_3C
zv`MLLGe`{t41p~nSc_Gj%Fwa^0eB^GgJ3#`v*{{#u$Bo3E<TXmOr4h*1vf_apk4%0
zv*t>qxH+PRGmIn{4ds?D%j%eAlctkfoMn|;Ld)0ypjwMy)QanJuDW$M2sN^bwP{mO
z7{Cn1<s3DlDP=dN3ft?VL|6i&<)RM7nU`1vn}ow+#+i^<@m8$sA~+Nl_?A!&S3oMn
zR2Vax5+GC+f%tlYPPFkLtz?t(2v4sN2XvNrgMiiuXfr00nAOOIi!so~v{}jamyGQ3
zO_by?9yK^|n%Y}}&$I~Ni012D5S=Ix7JfWl-rRUWyW+@@>{by#7B%ZYrq;-!5$;o)
zIv}uN4`8(}(C#mwwNvC1nre%Iv-T7g>=SrC+!8Q78pQcVM)OWChL}yTljg>=f>=yM
zN;ae}GUx|oG`6&1gU;*BF#MqxC&R+wv{|)LdIQ19fHqI{QoZMk1*7CDNzhw@riJ5q
zrPS=4nI~9IqEn(vPA3CG7=xk;SZI{^G_Tsc$2EFx;Q=zVW=B+~?|WlaU3iPtDyipn
z1`?&jrU1Y~vYvFeH{CVmjFXX@pTmt<O@*86Dp^$!h*GJCG4_Bf1UighnrO$3=;leO
z)uNb51?(hFC)1soEfKmFB>iFyx3V7NO2K9gjnS=!CK<bu8TIF#ie4hr9B7r{80ril
zg&PqfTk*J}3@yKHhFk;mnPp^jTMI>p*ABSW_?cVb3s{zrsqV>fC`T{{I9`*!*>L2@
zp$PyOB(lO<Oup`;z(|pWfJ*u)WC{I+hL0xb1{HMMu0XW$_NnV1ojzur5f9vR@xA+_
zJ30O8L!bVg{Jr}>!U=bx>?>E#fAXCdnm>B|cJ%fu{M*4V;O=7wwG($scLP3j$HBwg
z73P7x)wScDYX|rJtNd7SEI2wo8KK{vd_y|5_w#Ij-@VS|7hgZ|xsz88->_FdTwc8N
z$}_iKxcBMF@%s8--j{q?{LqDy2cAogVW($jgy-KpPt(Ak&hEatUwZ$$o*e)FYoDUD
zH?Ew0>aBgZe)gO|KkdBAe+mBrjr<1u#D8{vdC$*}o_OI~@80{f-JNIEyP(7Of8hDs
zPVKaAyYR(5uRXiFds_YDXWCz3^w;Qz&i(Y?d-lIH_`{D!_c^oWH+QTj?s}NI_V|k*
zoIUvWr{43O-5a;ObmQ^+TvNI9<kjf9j4Xd5Oslj1yX61i<NqMv`R-*beB*B~Kl-cl
zXAYPf{H;gM=nwB){QhsfV_!Y_;Xe;wUSED<amTsK_UW(x`ptj-^~QgVTb|kTz;pix
DN|;P~

literal 0
HcmV?d00001

diff --git a/secrets/master-keyed/keytabs/tornado.age b/secrets/master-keyed/keytabs/tornado.age
new file mode 100644
index 00000000..abdff3fd
--- /dev/null
+++ b/secrets/master-keyed/keytabs/tornado.age
@@ -0,0 +1,32 @@
+age-encryption.org/v1
+-> X25519 zh2S6HK6e5rp3Krp4HR5Gcc+R6vXzjMBggdYQOGY4SI
+1G7CR+A9xClo0CvVmam5omY2eSC2SRWwAqEKxt0RbvE
+-> X25519 kW6DEZH/AvjlGvhGuAcM0oBKhwV3ZA5DQ4NfbFszJBo
+U1fLYhRlk4Lbcqok/I8LrVadBxeJDkDZxHV93nSBSOc
+-> X25519 SHDGe9Ga7YJH/k6Ju76SVRihy0WdA9MGf0Ir0gq1UkU
+gsU+f3YDHLw8o7eRaBtpo+w5L/L1IUxgp9Mgz0p2zpY
+-> X25519 U/JU+6PYKQRCyVDcWtN85/SwMA1NzWCqkZXfQZQEZjQ
+CECvJfbYXQV4I48nZ7jnwXAsfpsBdt1f8C8Zt+klQPk
+-> X25519 iz0+S7kQfbbB+dV1O3O6T8Kj+uvSqrtILzin2Q4NGl4
+V0qzisWTHerIkn6i701iLUsj4k2ibWrt4s6AlWNBsxQ
+-> X25519 QAcb1v2Yd+OYGxLyOgPB51WMpNNqCQuMfTVvfn+58y8
+ykgaI4QhSRLasvtn3+d+XlgHyhuvyjWRtTNdqhTVVuk
+-> X25519 sVUTj4go7ORpVxWz6Ka9APbwMdTNxuKq5hltjW4fhFg
+B1EbAHbnjbHt8Q+f7/+9AQUBnmiTTRaB4mtveGBUrwU
+-> X25519 ihH1tBqTLkXa0NOoUx6o0hvZ6fWdvFPKHh0Bs5ezDzg
+Tm5roJrveyqWAtogD4y3IpPTEUr/MX8Hqfusp7rskTY
+-> X25519 CuLypn5izkOapKZGmlInQjvMCccHjOCFtWVP4H4D3gI
+nG4NS/+WRrCpGJJmYVCiZoAa0FkmS8Ms32o/EhAf/q0
+-> X25519 juXKjAhVvkuefsQ8lc2CycgdRG/TA8ZCXKLZ4alW5j4
+h1LCwOUrsyFBYcKTHvCVphcU73yhdweVipVG9gkR5I4
+-> X25519 MIJtz13S69gO02MDpkC93y7uUUxdaCbliihX52Kp8WM
+wB/R3gJTcgg+Jw6+W67yHP6z9eBn76wOoe2ni8cHb4I
+-> X25519 F9v0c6hcwLuS9eFQ7MzBQNSI6ODN4mWG8tmghCc6t2s
+DKtCWyeaK6/mp8DmbX8T2fQhcVzUUnQvBYFHbNJHCI0
+-> X25519 6gyOGyVMELWbUodUu+5Nu2Kh1HMAFoIrgmppClpbdGE
+u2nySPUD8Abj9HPIw75Pd0OSCT6NSusaE6TKYq5E1tI
+--- khRyzoP8gvBHrjLFRvPVQO5ZKcI1IX3oO++Np6AQ+l4
+h�7����^_%�S�.9H8}8���#�i�[����ל`ezp��JZu����;��J�V�m�"��}I�H�u�r�H�ҳ��TEɝ��щ:Rm�+%q��N�tz.�B��bp#W��HI�e�Po����/(	X$�v{���.GL�
+O�O�#lC��$
��hw�D��U��ݛ_��/ۉ���֝WNd������Y"͢T�v\��i3���G�A���fCX(C��wȆ_T�T�6
+�؃�w�c��r�O�K���1�G��%����
+���Q��n3C�i��Sl�80r�$�|b��.��͢�w%�_��=��+U��OGU�R���%�
\ No newline at end of file
diff --git a/secrets/master-keyed/keytabs/zecora.age b/secrets/master-keyed/keytabs/zecora.age
new file mode 100644
index 00000000..993dd498
--- /dev/null
+++ b/secrets/master-keyed/keytabs/zecora.age
@@ -0,0 +1,31 @@
+age-encryption.org/v1
+-> X25519 8T3QRhtezJxXKVV8qhgqFgXA3DZZidC0vnP5XqocLHA
+sdRWvwtDRks0s/9oROGDIk1/rE8CWWFXHfR28/MudNE
+-> X25519 /s3qgCyiRUn9cQLlocgc15aEyHNOdCuU9AD106M1YGw
+SXzOvw8SvCj+b/xAjw5y5xFBpsUe/ZiVeO6HWpz95bA
+-> X25519 UxDl13G26mHFm8uQKunI6gkIJ86VFhCTOre/FIIQYwY
+Hw5ayVAhpZQTwv2dTEbDYzU/Y9Fo0v1hrpOt4rO9cjk
+-> X25519 fyz7jqlbRLxNc03MMnLMH1TaK6tn9dDpBKyh/xapY10
+w8nRo+ghtrK+VO80oTM6hZQAIu1tK4tj9PjXcYFR1fw
+-> X25519 RDJLN6zALZOUwrHuziix0M5p8CxMM+Q2REjZ6UTuwUs
+E2eVcRxEFhN+o+6O52g6w2mHFIn9EED2oB4wXrdi4Po
+-> X25519 zIJtrf+VNLzNNrJ1sv4QUli+WxBEm5LmxVwaim7rH0M
+3sQ6GyKXE0keJXCgeGQBbxSIX4QeDZeVKFsgzNIGTAA
+-> X25519 SHs0ZpJ165nCGzq83lgwOY42IGZdJeAPZodSHw3MxSQ
+DGGgS2BBKS5PKsW13VcSr4wTPgNGlP8tJQPYzHEYAxE
+-> X25519 dh2o7K/5Ly54W/ZtpePMNQkSlsa3nrzB5jqsOgl3QTo
+KZ//SEFd9oaROoZ/pfFLBoDMaUV878bTI7ad4V22Zfg
+-> X25519 mAdt9jf1K2zkzAhl37W6g8t3XKCLarvJCNx1fKA6Xko
+4RbeUbSYWIzOLUAcmy3UNYAFWJxaFKSNx1PINLuOLVs
+-> X25519 Z6dbuenqf5iM/X3BtuwKAH9KtCOaFQ/PAlAUQlIKXTc
+IcM3CHpv6EAzMu8p8bxzBj3aaUEOQ5wx1yQzUQ0KGWs
+-> X25519 heP9av7lec6qFmpBRKmLGGzLMZC0bfgEcvfiKnp08Xk
+jOzZfu3RBSjSX/RlNEuWW9ZzrQtJnGzXNc97z4XOt6Q
+-> X25519 QrxPyzY3JsBMJycrOn6JKri74vNE8f0ju/h/Uc+pLgc
+u68vOmX1HNRN41rRlIPpFNMKtwme1pkvbA41eIdTmXs
+-> X25519 avwytdE/8EmqcOVRNopjGXjngw2e0CfLUAhYekEsT18
+CUtIZAnP37o7o1alWdGOUH4Y+nmID/FkejENtDKoAks
+--- zddKYegGiy2NEDP9WtOVEgY/0/GEmOHxUaHB7C2XbK0
+�%
��hk�
b�57'�*`�q9s���Ey�.9���~�!kI�c:��g�C���!)�}�aP����w<�TeIJP��f��5�䝏$l���!Q���_��fL�E��~}��*����7�&?`]m��̌����ֽl���������� Bܮ�zy��
�-�Ao�7�����
+�������J�R�^+�ׂ�����mO���1(/sh�M�%�Z��J|�#2�V�61����0�x���MOf�fk�������x�%S�j���Ȭ5Jř&���ћ������[��zj"o��ej�������a�X˅��ĩ���]s�
+��^ܦV
\ No newline at end of file
diff --git a/secrets/rekeyed/adenine/371beaefed71409c8be4005529e9b79e-krb5-keytab.age b/secrets/rekeyed/adenine/371beaefed71409c8be4005529e9b79e-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..a9dc81364c82514e9ec321be772728329434ea88
GIT binary patch
literal 663
zcmV;I0%-kVXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9Lb5?U~H$fm`
zR7P)eXKz_~PHSXRYC=miI7xU}NjW(=LrX$vQ&vMVVo-KAOJZ_(crXf0Y)LSBXi02!
zNH<M!Y*$Y<VL32VSxjVUV{T$uRcK^tSx0GEb5colGGhuYJ|KK+TtRtpEoX9NVRL05
zEjK7&Y+pu0ASF0RH6ScvBzS6G3UWh3X-7ylZBcDVc6UT;WH~osZAf-XIAm}uD@$xj
zO<GPeLpDKfX*GFic11HYXK_q;M>I|=N<uMfRb^)|N(ydtLu55iLSk5WYjRXmb7o;^
zb!BO4F;_!lb#QS)G-pOp3N0-yATmZ_bxmS9D@;RHIAJt6QZPbNOKWswa(YB|WjHr-
zY++1VFLZiEM|f0o3NJ%$MiKQxosvaJwEMHmA!aODtp$GBQgJ#+7}g?8r{f~LkH6a4
zU{2EmH9neMz+uaByIsNcQkKI29xu*PE_qhpl!W80r=xG7z#gr*OA_zD&&7sK>OIIK
zEOOElM1yegbT^`Gw<zGmwN56y$u0h;x#o{KeNCSKDU(6<n@mh1#n1MUL#{{+M{8mf
znH_ybu3tejzqh{>>Y}i;=%RY&X)7ZBcp`DL!#*X92Gb9KIRW&Vj8PYf=O|5Tc5vV;
zm<KF0VuQ(RzghyPi}u`GomD04#*?SUVX8SPb~I;aCrE<m;J@;ggykC6AU?Makm}eT
z?He=XA$y|dU(v;6M#3JGva;$=eMYF&oGKtqdI2wQq*9ps4tkCf!X&Z0-#}eZhp534
x$xx+7C&j1UcA@cJ7&Ja4pi=bBhzJw6fhSB8ik8|l)!Kodfb~w3BA{IBXj4AJ5SIV|

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/cytosine/67df2bc4e1be230aa0fe2a7f6e28b561-krb5-keytab.age b/secrets/rekeyed/cytosine/67df2bc4e1be230aa0fe2a7f6e28b561-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..f79b0f3e049d0d76b8303f61a204e39f4a6277cd
GIT binary patch
literal 568
zcmV-80>}MfXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LW@<`xOi>^?
zFmZ89MNW8mIbk(dM{;d7Oky`wFkwnpG-fqNPdHL!I5}}KI8=2*RBs9}P*qrBW_mI(
zXm&O-XG&RQYDrO3G<0NnLos$?Qb;&cIALaUa7$W2YG(>9J|IMDdNNN{EoX9NVRL05
zU@}Z+bZH_fATcc<Ry=qLL1QpEK~V}VEiE8Rb2NE0W@utqct>h_Qdx6FXg6?THZ^!v
zX*VxgFGEdYYEN`hWol<tXKxBnG_)lsK2#6snJl!<q!FBDkV%M!stJhESOtnVTDvO8
z@vI|{+P(}T7!kdQ>2e?#$5|`D#iuTs%6Z-amk(Ot0gQD6f%=JuKVdXM(?99dqbY3}
zD9m%Ez4(ax58Oj<wMqnBeP4)<4Gac8Ei9IkP*3jPoZ}jqjJfBZCO{rqON;PyW9RvH
zeHZn6KDb1(tYTAQD+*>_pbEsV@+&e`An$G6*={R6J&^)$c`LLZZgoD1s0vBWDaf|;
zF|oifbdSSU&9N(jDplpiiR|qXrux87VSZG`WW}?^>2z!3G$9f`^HZHkd|#zLhnBqr
zWC#^emM{g=C&}c?gs(v7rE*euzdBXSm^e-?wa&AieRnCRKc~wlY$u4tqpG-@QUsOf
z_ij5NCc)MPN-U`zoPTZVm_JO&^#+Hr;8mcEfo!BU!s}!&NQy{6^uq}No!d}#u#Db=
G<<2#>Z0pki

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/fluttershy/6b0443eaf3749eafadb4dd593fcec387-krb5-keytab.age b/secrets/rekeyed/fluttershy/6b0443eaf3749eafadb4dd593fcec387-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..7b33fb853a6ebc08019d46e3a65586ea5c1e4e5f
GIT binary patch
literal 590
zcmV-U0<ryJXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9Ladl-;QFkCw
zY)VE|G)!(cSxQ$oOlxsuD{EFaOE+OlH#ToKXH7U%ad~$&VOCI3NI?o!V>U2PLvnU9
zMS3+wMM7C;b3-;aZ$emMQZZy&MQBY*SUEXCMrw0Wc0~#;J|JdgbYMhtEoX9NVRK~)
zM0!hlGC443P;)qUVOMQ0HB~uAXKYtAS#~p5QfX*6c1uNXQ$Y$XEiE8TS4?+zY;Iv;
zQ+jnaK}I-aL0L{%Fjj77V{t`tT0~<(S#B>$V^dB`T3HI@ff#%<qM>8dmFqujUPa!U
zb1PtjP#20$Z5NdKtNrX4kuz@9DPMoFW`p(ztXbasju1=l1Piy-TZFwJIoKAygd*1C
zdLwe1iJv`V3stB7guAo6VoMw?mm4<sGIZPHIsnjf+Govt<#}^*MLM1|L_6w~$t2po
zLK|`X;BRr<5JRQ1S%AZ5#3r8UZ=1Jg6Ya=wrELN4&tKZndxRPNleS|8ix`M}wpqnO
z{#{Rec`as<m<>_pqj9}2V|^&JPzmi<`YwB2(DH1EZA_b<`qk<B@u78HalwE#ZXNpk
z+1B@I`T_Kg5xDLH_fuZ48ZAzgAc*&$m!0^;dY2+ojK4#Q%)%<V6Y)Qds67^Dt7Vv7
z<LzWyc^|P0#vX(X88P$Tb3rq;%S^h+T8)yjCdAnO1F_cGo?2EmcmQs=3VLK2fjvI`
cUKkbmbURV7;FeG&q*6x)O)S_+SLfe_)p0KVF8}}l

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/guanine/7451000c8034703939a1df4585b8a784-krb5-keytab.age b/secrets/rekeyed/guanine/7451000c8034703939a1df4585b8a784-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..af9d47b79d93e92b9377552017625f9fbd7114cc
GIT binary patch
literal 628
zcmV-)0*n1&XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LHb+`DHbEd+
zVk=rWXmNH^RasSOX;o52YFH~}QB7iUW;8i6O*B_}c}FsDRBTsHQCSK#GiGa0WjQc-
zXIepQOF>LbMp-jhQD#YNXlyc1YGqVqdN_A;LTog5Fi8q6J|H1&aV0z{EoX9NVRL05
zRy{3vPh4yYF-bLAM>BC)LNjPga&0zha&mWTYei;hHFh;pWmqtJR6=%9T0(DgSW0Jh
zcvMAqZBk=TQB*5gd3JVFT24Y#3QR$8X?SONGdMO)Z3-<dEg*SRIZ;VCbU9IUXJ}1Y
zQ)MtXGG<j(Hc3}Vb756YG-PUbGIVT7GiNYZQ3`>aq2hOsOe(e1>~is|U+s|3HeF0G
zldL%#w1-0^a?IwVE-~+x>8YhfD>PS?HVEAZj7H$g;O!E#Cw(mx^BQV$4X^huxK=<}
z+wCrJ3E^of8v#gB$T>~2grGg~<7fA=>iNi4Fy$-`(6YZ3C}Eu4uz6?sgzNCm!eA}E
z5yK``8yPxmR%p|rEc1ME&d5VCB<ExsJV~Kx+xB|qyJ4qc1P7$dgCN-HtgDQhz)zJY
zVhRej)7P2X6NNGUnRNwS68C@eYtCWIOZp;cYgZ9LZ1Fa@t^fpJ0#a9enh-J%o^-U1
zkyL62F;Vr%y-RZ}9s_2fRq10atq5FhN4daFwit!!io_G$53Bd>+WD+f+Kli=_ZD#7
zSYe-iD9ouctb`XJ_-rBl+0;T*#!QD+bK`$0Dp%x`u;F9jO%7}H5H9a<<=El`RAl3m
O>~Xqv^A_WLd3qpR%Ld^9

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/overheat/fef32b42384dca73cbaffd56d0a632cf-krb5-keytab.age b/secrets/rekeyed/overheat/fef32b42384dca73cbaffd56d0a632cf-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..696edb39c0c676bc5971f7731185011e4c679bb5
GIT binary patch
literal 547
zcmV+;0^I#!XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LXJke;b5S5o
zHAHf6ZE{UZH8oE|K}<?PP)}A&Lo_chVsA-CV>C^3V@x?SQdVX|NOKA{c~4b1Z%1o-
zN>qALO>ky%K}s=sSZP{UYgKVFD_Sx`b!==oICe8=ZFdSSJ|H4!SXM1(a%Ew2WgtgM
zC}0X`MMY0}Q3@?BEg))HR#{6>IeKGEXE1a(HfBkBdTdfvOe=9uae6COF)(OaS8q;A
zRC;krGz#$<pW$gD1hQQgBa2UCWV3pD9mJ9Qn?@XuXVU<>%{*N=j4=#~A@|w&z;M84
zTK?H~oUf|e@+}p4hY`bIhv~=dH?PP;SKDn-*Ag9y!;^|4FP7>ugJi5=c3VIVwr9fB
z%1}hHeLCZ55QPf3c}C~Ofk#ppaZM6GfWaZq3gP(`*kXR<PIXjd&w1!=`Qro=<8Ea%
zjcJgxq(fevwj6nlL>Q`iw#wM>A}#bLHf)#iR^T0>1*mn6;n6%S-%6(%PXW`)Y82jt
zYv4fzUIj)weBL>x%QZ!w$%bMX78u>oyd=f>`g;4-Z6w}4sCL<WF8=;wH}vZ8SKdml
zl~oA5l|Lto?%?5>LV9L<;aYZq-mw3nJ3t@t&0s1hnT2Eq+pZf6)tul<H*7PG*n!hP
l1V>6ILkOAERVD5&qQ#Ttfv7b{zAnr$9F|<X{a$N)VuD!N>K6b2

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/rainbowdash/f9a2a398790df94827cf62ad17acf2f5-krb5-keytab.age b/secrets/rekeyed/rainbowdash/f9a2a398790df94827cf62ad17acf2f5-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..41ffbfdab9d35f14e6514045d7257b91bcf7eb73
GIT binary patch
literal 683
zcmV;c0#yBBXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LHA+)<OlKfy
zQD`rCaZ`41Hc)m}Zcj%~VpT6fXK*=cHE=^uc{F%*NMvzqazZmpLO}{qc|~?rNl-U1
zHhM@oODl72H8NFtD>Fr9I8tObQ$c5LL_%kIHEnogR6z<YJ|HkiHEAw;EoX9NVRL05
zdvS6%Ty0T53UF^(Xk>JDGFd@KXGt@9GBtBnGB7i3b8>QdS9C>JX-i0YWKwu>MmcIz
zIAJhxP-{0ac4$#oX>D|LbYo&>WD0CpbvSQANpUb`VPb81Wld#8Gjujac5+8eS#v>H
zIdO7zT3Sm~S!`@jS7J^~b9pvyV`o`s3N0-yAYyB6I8!f6T1Rs)Z%{RGV^eWMQBGP)
zW^r+JH*05URz-PKb3;a0dO1x&3U6{KA*Dk}4;`R=iqzYB3B|Oo@a&Y4hO@A6NyGo1
zyY-n>M7zIz8EJ5iY;LfL&%$1GD&Z?(l=B{a0L~Qe)wCv`;t`Y0-79caGwTV-8s<^X
z_X?Q!UI_7R95FJu0*_~3=xy?5!g8Y3x(fUdV6->?q=%WarO)&8Kof|Tp-Ys)so?0l
znyx@h17-RtijDBIYU<$Z7?+0{gC<fdXKu$fCIRP^6op?GuFUI*Ljh6LkvogJ&ehd}
z*N8xYdx>*0zMBLJKiDVJGI2RcU-yzxfk6-qGw1F{h!BXE6Shsj@n0&Em(?Wk&5^&^
zGrMKX_~0!w?2W4%R&O%dS5{miQD@8hV}RMAS!RA}=3!2Rt0;~1zFw*kETgyec4SYb
z+|D(xArJ)n)k@T+I{$T5K-9kzjym9$9Uie(kWkXNQiqkkeVat~CBO)^%LJ#)!UTei
R)MxvYuxpD<#Hh&SHC#H1BxnEt

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/scootaloo/67fff3137a419a2f7071f498b1a8f820-krb5-keytab.age b/secrets/rekeyed/scootaloo/67fff3137a419a2f7071f498b1a8f820-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..9a68d3950618a079a9ef7e1d07a5db59bc3f776c
GIT binary patch
literal 595
zcmV-Z0<8UEXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LQ*uLPFi{|4
zcSUwpYk68VHCl3VaWr&uH#JIEM>A||PBv;dX)-fLYfD;cG<h&pctr|Xb!25xLTqtt
zcQrRoN@H3^WO{UMc5PK!WlU~3cS3DzWocqnLojGaP(cbUJ|Ji@Q7vb3Wnpt=AZ<Q1
zdLU3XJSakKY)v3{H99a>RW%@6S_)=%NKa68adbvydS*37V^&r%F<LNEQb`IeEiE8x
zP-a>+Ic;oMM>1-7cWy;@QgL;6Loz{GPikjbVqtPgZ$)KAS#NAYLQx9)li3Zb8KMA*
z_Jz9kZ3GYwtEm3?sKhoin=~ALJCf-%Qt&wC__Sl5ww8v#p&Gnh^46La=cBFWEOge;
zU~7CjP6wO7j$VMuD=7d;K^o0L>L=yA7yi+vj15B=cVyd@399@Nl*s6P3h!;js6pnG
zGc*K3_&hrG;}8|V6o~?xb2PUF-qXR#<M>H}=FSv@+JK70GqB-1v>32Td;RJg?q|i9
z{mXTX`azM}PQo6*sN>0Gd%P++NJOzT6cX%Ub)~51XEcw-9G!y8<lY1oUX?olTnOQ7
zCa79w@H5pM71v28ElE0tBBDAt(31lGu@qES=mxN@{gixNs!4|DiG$d98jkaD!QCJ=
z=H+S`E%_ZWQ9kNB@`6!8cw0azu0wE_@MI^W>jf0wO@V>i#@Aju%TOuQG(Kezzc?*i
hJawvzN(IgX**4nhQzWlvmVZ27H-f)0B$b^H#%3Yg{7C=+

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/spike/05f1d7da47ff5023ed8782095d263b68-krb5-keytab.age b/secrets/rekeyed/spike/05f1d7da47ff5023ed8782095d263b68-krb5-keytab.age
new file mode 100644
index 00000000..b583435f
--- /dev/null
+++ b/secrets/rekeyed/spike/05f1d7da47ff5023ed8782095d263b68-krb5-keytab.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 x5k1mQ x1mirTwGphQFKfpfbiRkJwECA/ipi6ldLIp1/se/M0c
+r/xYoj0g5zOXZy10tYpj8zlnFfgqAhZlm5zfSWAcT7c
+-> ~;p()t]-grease e'}G@0S( :bgoSjMR fK)
+GepaUag7XPsGvYhQA2H1r+xCwlSWBz/ZY9q/faDrxfkFQCjpzIzqoVdeis5w87fU
+6pBnB4XzM/GV6D58Ln5uQ6w4AbQnrJ06i+FTtOEvc7E4ZA
+--- vWpNiD821qLqFItNFC5i2I34eB7JLuISemzrrkcDzzY
+T��aWY��.[�����^����a�NR��ѭ����NI��$_\0;���>�����W��On
�ܛ��ə���%��?3�����i.xawK-�F��aXy���6��8�[�Vژ�/+�n��E*\�uC�q��Q�� �ts�:��rph\y�
��Bc����4ʒ�-Ƿ�Sz�
F�
������m���
+ur)�qJP�T3ʣ�֘Dɇ�����>j�Cm}o�_3�[��9�p�p�4�S�~SK�i[S_�������?5
+�O:ݓ����������È�1}HJ�S38��X����"o���q�A��@đR�����
+��2/�R�G�O
\ No newline at end of file
diff --git a/secrets/rekeyed/termites/bea4ab814e846b809dbdd1150407a01f-krb5-keytab.age b/secrets/rekeyed/termites/bea4ab814e846b809dbdd1150407a01f-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..9c67b6afe95720e1f85e268c3405735148e92101
GIT binary patch
literal 633
zcmV-<0*3uzXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LR5NfvD?uQ7
zNk~>octLJadUZ^3No;X5b44^zG<Yy-ST<r!L3L?xZDeXpIcZ2WXITnUO>ab2V`M8v
zWMN}4csD{gOlUTCW=Kv>F;QV@LSk5AM^|k&Np4VcQD+J*J|HqhA!99Pa%Ew2WeQ1i
zRykKRXEbDQQ*vT%MtLi5H8pK3S#nHNVr*_ha8z}2a!fB|bZ#?QI5}@pM^iINNpm$g
zSur?4SavT<YcUFKMNM;WZDn&(cV<&hXe&Z(SW7`>VM%!kEiEk|T1zrvYI8(kPdP7g
zV@@|zLUD3cM?q6@a#u1nL3B@Pb3#XDH&szqNN-gNqh!XeeaM9=3#tECT%2cd3b^iF
zPFCAM3Zi*jRhY=>%YBE+?O%?9Oeo>UCt=ij#^#CvT8Zs_*o`{ypV!&RIVd2LZzbW+
znA@cyw8Y#Y?gOJk1azanmB9NJ%q|?9^`~R&w=UWI_5~Bo-QUE+<A&G!QXYAR=(bE!
zQZLXZSUK~F=iZeo60FKW@GoSKJWZ7F!LCS2Eln0ilZ*>=XTy<?>UdP9uADLGVX<ft
zA|C1#X^9^j{6QZJ=z@wOcr}B+Yj?<+N61pi1%z=w;leH|N;#GA!Q@kwwYHe9+fe{b
zBQgNmB9%?Vc9z3bt*GfRF&9H}dC^lmW2WS!4D?@z5);ApX>Ki7@t8*Sc$m7h%gOI#
zYysbiVy^k1y}vhIMRz7MNb3pR_NcAOp~fg!3<7K%9-atsuW6(w4?X_VFfmR~L~Vda
Tp3MV~W)|$Qo=^usE7B$4^Ck)9

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/thymine/d2850c382e675153fb56dc1a935d9c9a-krb5-keytab.age b/secrets/rekeyed/thymine/d2850c382e675153fb56dc1a935d9c9a-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..dd15dad5eb75a4b48060dd5ff86210da11f52c36
GIT binary patch
literal 591
zcmV-V0<isIXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LL@-EJP<J3{
zWK={^HEd%zIcPItN^59ISwm7+PjxFyFGp!fYDjolNk%ktM|4naGiM5TG&My^S5#VV
zZAeN=YF063P+>+-S~)dwb#6>JRc0}0Vo6j;XESAUH)jehJ|JFnCPi97eJy8lWnpt=
zAY))xH6S>9azizDc_<)eEg?%w3PV;%c~5UIW>-uxVOer`OKC@KGG;MMXk>L!3N0-y
zAS+gRGB!qTM>1$HV=FK)R#RwdL}M#LIZth4Fiv4BQ%+H0d3A4eRckLW3Sbf``@xAa
zzBM7ik+S%f-m-0Ui%={6@m_+@3{p5NT`*+_2SY0P;&bZf&yMevI`a$aE-^{IuQz<2
zhVtgeVF2Cijn0!}gSO!&(B~ruTnw%54_!Pog)TBp#3VtADICHRU?0^VZjl*2(c8w>
z+G9GB1Mvrg#9e%wA}^s|+J3Xk8|!L<0AMHwVvaHa=}oMKs|NQpbAt~%-1OuzyC}^s
zi97~=4%HDJ?mLfb-vRS*fM1=oCY)`kW(O#*Ux~p>$l|~tdjH9GEE(&`xCo`+AlHa6
ztG@3fa$meg`y}JFsQ@O9NC=kV)DsXnDOhkAY4pzKJTXUjZg}Kinmz9DEZBS|w{p%h
zI89?9L2rcG7mbv}L6{-Ev@gPo*TzE9?_?5vYjpbhSmQjRi1`ixj!S)7sD5-_-DZN7
ds-#L_SI3LUkjH_i5q}J99zAoTsq>zD-#kwR^g;jt

literal 0
HcmV?d00001

diff --git a/secrets/rekeyed/zecora/f9f588b3afe61835e00e661122e7ad66-krb5-keytab.age b/secrets/rekeyed/zecora/f9f588b3afe61835e00e661122e7ad66-krb5-keytab.age
new file mode 100644
index 0000000000000000000000000000000000000000..51bb423f14281217ae1dc565e6a5d8fb31740c2e
GIT binary patch
literal 672
zcmV;R0$=@MXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9Lc2jmTML{4h
zMo~gmICxh}PgYA)Q&eF|RCYvBSY$yna8*!iQdx30SyD7>adS>?SYrxQRc>cbaW`~R
zY<X5{RZvGTRcvunF;aR}a(XXsS#?G;YGG_=cvn?QL2n8zJ|H-HRd!rMSuJOBWnpt=
zAVEbSB{vFIHep3{cVlT+S3`DAI7n$@a6?j4VMt9gb$V+;Z8A_$NHuX&FhOo_c{qAc
zR!dB8I8;<PYB^~uD^EdLYHMu@H&8)GZeub@H#b&RR7g)^O<8kjQZQysSaL{dD|v2A
zGdWpBSW`+$H!*fGcQa^fZe>JeWn)-)Xi_&f3N0-yATwESD>zXvO)EK8L~%-PGHgar
zGcQUsOe;)Td0B33cPm6$bZ<~%cS&ej3f-}w?{5EOgAoI?ZLPfa=ngcL+1sx{NXdGU
zna$N@n)8l9BTQ6h#d+{E)(LjbaRLfS%K~#e41OUg%?8PM14p*}8Ulve(RUVTrcs5o
z8B<U=F^7vCv^V;>j&@ix4EkX17h2pRl2IXA#3_n^3)7YPP#Xe>ikgh9CtcdZeC)T9
zeb&N?LpeQ)x3{G44WhXb$TQ|+?5u2!eUOEWC?e2#wZ!8WslVFy$u@PuT49{G&KS;p
zE2Cyd{g7MycxDD|Wn1)*W)fav00K4FhDG2SF$X_A86oiinQFUX-DA0T(31PpE4!Dk
zyqMEqe_%WNBRUCIjWTkWiA89=@^)@2`-c%F)jo;8%LSj@Cd)bCk{R-X5r=RYeH3u9
z+mhe;h~?iA92~$DkpRM^M^ufeUy6|44*oXRWMXHA>CZ;SYvNLO1IpHUgwGStot2WL
GvTueoYZIFQ

literal 0
HcmV?d00001


From 81d2544dfab5ef692374e900b8f464e05b9b8bfc Mon Sep 17 00:00:00 2001
From: jaysa <gh@jaysa.net>
Date: Wed, 1 Apr 2026 05:46:59 -0700
Subject: [PATCH 6/6] add todo

---
 profiles/desktop.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/profiles/desktop.nix b/profiles/desktop.nix
index 2ca26676..def51fa9 100644
--- a/profiles/desktop.nix
+++ b/profiles/desktop.nix
@@ -115,4 +115,5 @@ in
         GSSAPIKeyExchange yes
         GSSAPIDelegateCredentials yes
   '';
+  # TODO: only forward kerberos tickets to login servers (currently supernova and tsunami)!
 }