#!/usr/bin/env zsh

keyFile=../dns/keys/${2:t}_acme
gup -u $keyFile
sops -d --input-type=binary --output-type=binary ${keyFile} | yq -r '.key[0].secret' > $1
sops --input-type=binary -e -i $1