keys:
- &root age1cvmffz227lhsvy4ufh0gnkfsvs5f27hv5l90m0lf4558uphteefsj2t74j
creation_rules:
- path_regex: secrets/[^/]+$
key_groups:
- age:
- *root
- path_regex: machines/[A-z]+/secrets/[^/]+$