# todo
# some "restrict,pty,command=..." ssh authorized_keys bullshit to verify restic, or maybe even just host the REST server?
# see ./hosts/nixos/garp/sftp.nix