Now, if deployment fails somehow, it will generate a new key, add it and update all the sops secrets. Duplicating the aliases. No bueno