RESTIC_PASSWORD_COMMAND="/usr/bin/vault kv get -field key services/restic/shadowmoses" RESTIC_REPOSITORY=sftp:backup:shadowmoses SSH_AUTH_SOCK=/run/user/1000/ssh-agent.socket VAULT_ADDR=https://vault.chaos.sh:443