I previously gitignored rekeyed secrets, thinking they wouldn't be necessary. For the nix rebuild process to find them, they have to be added to Git though.
