{ keyCommandEnv,... }:
{
  deployment.keys."static-auth-secret.secret" = {
    keyCommand = keyCommandEnv ++ [ "pass" "coturn/static-auth-secret" ];
    destDir = "/secrets";
    user = "turnserver";
    group = "turnserver";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
}