these 2 derivations will be built:
  /nix/store/kyg7814cb4g76vrnagss5rr39l0f2s5k-sops-secret-files-by-host.json.drv
  /nix/store/f9c8rm3qybc3gz796j5szk9v9n6blmd5-sops-check.drv