secretGenerator:
  - name: decryption-key
    options:
      disableNameSuffixHash: true
    files:
    - cmd-import-pgp=my.key