diff --git a/dot_config/fish/encrypted_private_variables-guidebolt.fish.asc b/dot_config/fish/encrypted_private_variables-guidebolt.fish.asc
new file mode 100644
index 0000000..b4ea2dc
--- /dev/null
+++ b/dot_config/fish/encrypted_private_variables-guidebolt.fish.asc
@@ -0,0 +1,8 @@
+-----BEGIN PGP MESSAGE-----
+
+jA0ECQMI64fn/yHXOlnz0pgBWvHu/8a9rcb1wbRc8p880dAV6ViMgUSEMB9+fs1Z
+VaHuFdtrEJfUBNAthP4r1oCa/SjVOwnFW7zxhQzGncCXI9hop6r9lV4uASsWdJNZ
+84survnhgcobUnY0dKUufANjqZUvjQ0hu7k9cdZMLYGTf9aPWjVSmCcgYHxxQdPl
+oLQrboXeTBLB+EYS4sQN3KeW0qmXWIBQpA==
+=Cbi/
+-----END PGP MESSAGE-----
diff --git a/dot_config/fish/encrypted_private_variables-wash.fish.asc b/dot_config/fish/encrypted_private_variables-wash.fish.asc
new file mode 100644
index 0000000..ef52070
--- /dev/null
+++ b/dot_config/fish/encrypted_private_variables-wash.fish.asc
@@ -0,0 +1,9 @@
+-----BEGIN PGP MESSAGE-----
+
+jA0ECQMIVn81/dhZlUzz0sABAXtS1YiUwsl5jBJvvFzTwRINFMjW9/NmNAWMF/82
+c/b6FlNYr/0CF804dcM8c7HrZRK8RVaIfK1NgoLpRJ+lsLOWO9LHBYxODIv32HfT
+j9Zt3BjeaczrDeabUmeL3EJ/TE/LGwkGd+t0PBM962rq5y4V3tR6ZtW0C6XfaxQh
+C7N78IZEhGAvMuMES4x6mTI1/oaTaCr2xkOCEg2DcWhhdWiyNV8arg6xDY0dyQCs
+i/2qAfhzaHRRMU4RR9IYPaa5ZA==
+=LtNV
+-----END PGP MESSAGE-----
diff --git a/dot_config/home-manager/nixos/mal/configuration.nix b/dot_config/home-manager/nixos/mal/configuration.nix
index a655f2e..8c095b7 100644
--- a/dot_config/home-manager/nixos/mal/configuration.nix
+++ b/dot_config/home-manager/nixos/mal/configuration.nix
@@ -98,6 +98,8 @@
     wget
     yadm
     restic
+    git
+    chezmoi
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
diff --git a/dot_config/home-manager/nixos/mal/encrypted_private_secrets.sh.asc b/dot_config/home-manager/nixos/mal/encrypted_private_secrets.sh.asc
new file mode 100644
index 0000000..556ac56
--- /dev/null
+++ b/dot_config/home-manager/nixos/mal/encrypted_private_secrets.sh.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP MESSAGE-----
+
+jA0ECQMIBm5E7WVS1w7z0sBbAS3TCufT+L4xhgWlWfwMPKBN9keJxQ4qdHsXDGZ0
+T6BKP+FVTA+o42O8Nmopd1r3vdfZx7xJZ5Te2r+VIPiAjXb6hbPNOvA2rnZlH9as
+JKQxh539BmwPWxOTQLhxyITRP5TAAf3xOtYbeSYYJni2+XZErYYLh6FsR8ghXi2M
+qNehmJg61Y7nZoGNryu2y1qk3MsF6dwdI4Nx4Mx+dQi4kue9LmCBvQHzMOwtDTyJ
+nQl8JiK0Gn/JFzz5OTDtpBH76AK0t5QgydTDJA2fGe/eBeqrrFQlrhC6yOBTc6OQ
+rrk3AlijzTeLt3s3ppe793b027bxpzB44PRP7gf6oGAZs1uwJI82IV/0FhIH7pN4
+OkTpvU5ofPYIub0VGg==
+=ptj1
+-----END PGP MESSAGE-----
diff --git a/dot_config/home-manager/nixos/mal/private_secrets.sh b/dot_config/home-manager/nixos/mal/private_secrets.sh
deleted file mode 100644
index a32eb58..0000000
--- a/dot_config/home-manager/nixos/mal/private_secrets.sh
+++ /dev/null
@@ -1,6 +0,0 @@
-***REMOVED***
-***REMOVED***
-***REMOVED***
-***REMOVED***
-***REMOVED***
-