SOPS + age encryption: every .env file on my server is encrypted