{ appConfig, lib, ... }:
lib.mapAttrsToList
  (username: _: {
    type = "random-string";
    path = "system-secrets/${appConfig.appId}/${username}.password";
  })
  appConfig.users