keys:
  - &root age1cvmffz227lhsvy4ufh0gnkfsvs5f27hv5l90m0lf4558uphteefsj2t74j
creation_rules:
  - path_regex: secrets/[^/]+$
    key_groups:
    - age:
      - *root
  - path_regex: machines/[A-z]+/secrets/[^/]+$
    key_groups:
    - age:
      - *root