--- # TSIG updaters only need a key # THIS REEEAAAALLY SHOULD GO INTO A VAULT-ENCRYPTED FILE knot_tsig_key: name: tsig.foo.example.org. algorithm: hmac-sha384 secret: j/yF6FFcC8rw57jjz0sMGMA0o//DrXvS82aiLelHDutFhPldMBQU3EB+NttANIc/