An install reads the server's SSH host key from nixos/extra/, and that key also decrypts the server's secrets. Ignore the directory, along with nix build result links. Assisted-by: Claude:fable-5-2
