This can be used to pass secrets to the systemd service without adding them to the nix store. To use the example setting, see the example of services.dendrite.settings.global.private_key. See the LoadCredential section of systemd.exec manual for more information.

[ ]

[
  "private_key:/path/to/my_private_key"
]