one more question, more about nix probably and less about agenix

let
  systemServer = builtins.readFile ../hosts/server/ssh_host_ed25519_key.pub;

in
{
  "rootPassword.age".publicKeys = [ systemServer ];
}

results in error: cannot convert a thunk to JSON. Where am I going wrong here? For organization I thought id store my public host keys in a folder along with the host config

In reply to @uep:matrix.org
as for the confusion about the purpose of adding user keys, I wonder if calling the variable editors rather than users in the example config would help ?

❯ agenix -e willPrivateKey.age
cp: cannot stat '/tmp/tmp.EMmS36qdhI/willPrivateKey.age': No such file or directory
Error: Invalid recipient ''

let
  systemDesktop = builtins.readFile ../hosts/desktop/ssh_host_ed25519_key.pub;
  systemSurface = builtins.readFile ../hosts/surface/ssh_host_ed25519_key.pub;
  systemServer = builtins.readFile ../hosts/server/ssh_host_ed25519_key.pub;
  systems = [ systemDesktop systemSurface systemServer ];

  userWill = builtins.readFile ../home/id_ed25519.pub;
  editors = [ userWill ];

in
{
  # hashed user passwords (can be generated with `mkpasswd -m sha-512`)
  "hashedRootPassword.age".publicKeys = systems ++ editors;
  "hashedWillPassword.age".publicKeys = [ systemDesktop systemSurface ] ++ editors;

  "willPrivateKey.age".publicKeys = [ systemDesktop systemSurface ];
}

Anyone know whats up with that error? couldn't find any related issues on github