Constant ENV_SECRETS_KEY 

pub const ENV_SECRETS_KEY: &str = "SSH_CLI_SECRETS_KEY";

Hex primary-key material. Fail-closed: presence is rejected (not a store). Use XDG secrets.key, --secrets-key-file, or --use-keyring.