auto start at system boot - also add deploy to ~/.secrets/consceal/
deploy secrets per location temporarily ~/secrets/consceal for example and symlinks to there
auto start at boot - also add deploy to ~/.secrets/consceal/
add extension .hex to encrypted vault and .scm for decrypted
add -y flag to always answer yes
ensure you can auto delete the vaults by default, so locking delets scm, unlocking deletes.hex, all optionally
create my private repo of vaults
in manual add recommendation to wrote secrets to users and not systemwide - enhanced security and podman like advantage rootlesss