{ config, lib, namespace, ... }: { services.pass-secret-service = { enable = true; }; }