figure out robust secrets management.
					
					
						
					
				
			
			Dops nix for inband, or just a mixof colmena and syncthing for out of band?
				
				
					make sure nushell has all sessionvariables that it needs.
					
					
						
					
				
			
			Gave up on nushell as a login shell. One approach might be to have a small posixshell immediately launch nushell.
				
				
					make sure nushell has all sessionvariables that it needs.