creation_rules:
  - path_regex: ^secrets/users/.*\.ya?ml$
    key_groups:
      - age:
          - age1REPLACE_WITH_YOUR_AGE_PUBLIC_KEY