figure out robust secrets management.
Dops nix for inband, or just a mixof colmena and syncthing for out of band?
make sure nushell has all sessionvariables that it needs.
Gave up on nushell as a login shell. One approach might be to have a small posixshell immediately launch nushell.
make sure nushell has all sessionvariables that it needs.