My takes and experinces with secrets management on NixOS