{ ... }: {
	# To apply: nix sign-paths --all -k /path/to/secret-key-file
	nix.extraOptions = ''
		extra-secret-key-files = /root/.nixcache/secret-key-file
	'';
}