{
  user ? throw "user argument is required",
  home ? throw "home argument is required",
}:
{ config, ... }:
let
  hmConfig = config.home-manager.users.${user};
in
{
  home-manager.users.${user} = {
    sops.secrets = {
      "gpg/personal/key" = {
        sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
        key = "gpg/key";
      };

      "gpg/personal/pass" = {
        sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
        key = "gpg/pass";
      };

      "gpg/sas/key" = {
        sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
        key = "gpg/key";
      };

      "gpg/sas/pass" = {
        sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
        key = "gpg/pass";
      };
    };

    programs.clipbook.bookmarks = {
      "Personal GPG Passphrase".source = hmConfig.sops.secrets."gpg/personal/pass".path;
      "SAS GPG Passphrase".source = hmConfig.sops.secrets."gpg/sas/pass".path;
    };
  };
}