Mark all known signers as allowed

hosts/common/home.nix

@@ -10,7 +10,7 @@ in
   programs.git = {
     signing = {
       # Will be available on remote machines via SSH agent (Secretive).
-      key = "key::" + user.sign."sign@mars".key;
+      key = "key::" + user.sign."sign@mars".publicKey;
       signByDefault = true;
     };
 

hosts/deimos/nixos.nix

@@ -16,7 +16,7 @@ in
       "wheel"
       "docker"
     ];
-    openssh.authorizedKeys.keys = identities.getAccessKeys primaryUser;
+    openssh.authorizedKeys.keys = identities.getAccessKeys { user = primaryUser; };
     shell = pkgs.zsh;
     linger = true; # Keep sshfs mounted even on logout.
   };

hosts/mars/home.nix

@@ -20,7 +20,11 @@
 
   home.activation.setupAuthorizedKeys = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
     run install -m 0600 -D \
-      ${pkgs.writeText "keys" (builtins.concatStringsSep "\n" (identities.getAccessKeys primaryUser))} \
+      ${
+        pkgs.writeText "keys" (
+          builtins.concatStringsSep "\n" (identities.getAccessKeys { user = primaryUser; })
+        )
+      } \
       ${config.home.homeDirectory}/.ssh/ephemeral_sshd/authorized_keys
   '';