nixpkgs/pkgs/build-support/replace-secret
..
test
replace-secret.nix
replace-secret.py