--- name: "vault-name" at: "." gpg_keys: ".gpg-keys" recipients: ".gpg-id"