We'll also start using sops-nix to manage the secrets required for extractors that have authentication.