public_keys:
  # users
  - &user1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFx3E0bHOWxRu91+XFzimbVA1mP19c5To/7szED1OUf9 user1@example.com
  # hosts
  # get these via ssh-keyscan
  - &host1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKxk6NtiVv8L8R6/+lHgq4UP8P6JC7a6Wl2klCOOk8GP root@host1

secrets:
  - name: secret.age
    public_keys:
      - *user1
      - *host1
  - name: other.age
    public_keys:
      - *user1
      - *host1