keys:
  - &albert D98BBC6C9A27324654C2D8C464F6C4EB46C4543A
  - &root   D98BBC6C9A27324654C2D8C464F6C4EB46C4543A
creation_rules:
  - path_regex: secrets/[^/]+\.(yml|yaml)$
    key_groups:
    - pgp:
      - *albert
      - *root