these 2 derivations will be built:
  /nix/store/3xq1jjqa6776z890qprjdpr0svlc31b7-sops-secret-files-by-host.json.drv
  /nix/store/zgpm7wcrwixpy0z7q5vxjm2i8jqvg0jp-sops-check.drv