{ services.pass-secret-service = { enable = true; }; }