creation_rules:
- key_groups:
  - pgp:
    - 3237CA7A1744B4DCE96B409FB4C3BF012D9B26BE
  path_regex: ^(secrets\.yaml|secrets/.+)$