secretGenerator:
- name: decryption-key
options:
disableNameSuffixHash: true
files:
- cmd-import-pgp=my.key