/cluster/config/secrets/pub-sealed-secrets.pem