Constant ENV_SECRETS_KEY_FILE 

pub const ENV_SECRETS_KEY_FILE: &str = "SSH_CLI_SECRETS_KEY_FILE";

Path to a primary-key file (hex). Fail-closed: presence is rejected (not a store). Use CLI --secrets-key-file or XDG secrets.key.