auto start at system boot - also add deploy to ~/.secrets/consceal/